In the Linux kernel, the following vulnerability has been resolved:
tls: stop recv() if initial processrxlist gave us non-DATA
If we have a non-DATA record on the rxlist and another record of the same type still on the queue, we will end up merging them: - processrx_list copies the non-DATA record - we start the loop and process the first available record since it's of the same type - we break out of the loop since the record was not DATA
Just check the record type and jump to the end in case processrxlist did some work.
[
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"97981697443783092693029616447907768073",
"188638097780740105904048880968216719637",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-009d5216",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31e10d6cb0c9532ff070cf50da1657c3acee9276",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 3562.0,
"function_hash": "51165814228218450323798197033650997490"
},
"id": "CVE-2024-58239-077c520c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a4ed943882a8fc057ea5a67643314245e048bbdd",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"97981697443783092693029616447907768073",
"188638097780740105904048880968216719637",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-0b0d6c85",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f310143961e2d9a0479fca117ce869f8aaecc140",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 4105.0,
"function_hash": "197601288349626146386428449161897749048"
},
"id": "CVE-2024-58239-18987994",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4338032aa90bd1d5b33a4274e8fa8347cda5ee09",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 3562.0,
"function_hash": "51165814228218450323798197033650997490"
},
"id": "CVE-2024-58239-1f1c53d1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6756168add1c6c3ef1c32c335bb843a5d1f99a75",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"56125997725878918999947006010396684231",
"127774268722977171987308122648744511613",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-215e53e6",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fdfbaec5923d9359698cbb286bc0deadbb717504",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 4105.0,
"function_hash": "197601288349626146386428449161897749048"
},
"id": "CVE-2024-58239-343b2299",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f310143961e2d9a0479fca117ce869f8aaecc140",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"97981697443783092693029616447907768073",
"188638097780740105904048880968216719637",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-387d5143",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4338032aa90bd1d5b33a4274e8fa8347cda5ee09",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 4105.0,
"function_hash": "197601288349626146386428449161897749048"
},
"id": "CVE-2024-58239-48c5ca4f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31e10d6cb0c9532ff070cf50da1657c3acee9276",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 3562.0,
"function_hash": "51165814228218450323798197033650997490"
},
"id": "CVE-2024-58239-648196dd",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"56125997725878918999947006010396684231",
"127774268722977171987308122648744511613",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-6e6d9b36",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"56125997725878918999947006010396684231",
"127774268722977171987308122648744511613",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-77dbc609",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a4ed943882a8fc057ea5a67643314245e048bbdd",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"56125997725878918999947006010396684231",
"127774268722977171987308122648744511613",
"45042644238786447457290652031515499997",
"336187641241384564420953852024151631881"
]
},
"id": "CVE-2024-58239-f8208391",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6756168add1c6c3ef1c32c335bb843a5d1f99a75",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/tls/tls_sw.c",
"function": "tls_sw_recvmsg"
},
"digest": {
"length": 3562.0,
"function_hash": "51165814228218450323798197033650997490"
},
"id": "CVE-2024-58239-fa4d534e",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fdfbaec5923d9359698cbb286bc0deadbb717504",
"signature_version": "v1"
}
]