Tracker / CVE-2023-28466
CVE-2023-28466
High 7.0
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
Affected products and versions
| debian | debian_linux |
|---|---|
| linux | linux_kernel · 4.13 → 5.4.240 |
| linux | linux_kernel · 5.11 → 5.15.105 |
| linux | linux_kernel · 5.16 → 6.1.20 |
| linux | linux_kernel · 5.5 → 5.10.177 |
| linux | linux_kernel · 6.2 → 6.2.7 |
| netapp | h300s |
| netapp | h410c |
| netapp | h410s |
| netapp | h500s |
| netapp | h700s |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.