ACK: [SRU][F/J][PATCH 0/2] CVE-2024-26800

Roxana Nicolescu roxana.nicolescu at canonical.com
Thu Sep 26 07:34:42 UTC 2024


On 05/09/2024 16:26, Juerg Haefliger wrote:
> https://ubuntu.com/security/CVE-2024-26800
>
> [ Impact ]
>
> Potential use-after-free in async kTLS decryption.
>
>
> [ Test Case ]
>
> Using tcrypt/pcrypt, verified that modified code is called when running the tls kernel
> selftests and that no new failures are introduced.
>
>
> [ Where Problems Could Occur ]
>
> Limited to async kernel-space TLS (kTLS) decryption (which requires special crypto acceleration
> hardware).
>
Acked-by: Roxana Nicolescu <roxana.nicolescu at canonical.com>



More information about the kernel-team mailing list