Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux kernel 代码问题漏洞
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 6.2.6版本及之前版本存在安全漏洞,该漏洞源于net/tls/tls_main.c中的do_tls_getsockopt函数缺少lock_sock调用,导致竞争条件(内存释放后重用或NULL指针取消引用)。
CVSS Information
N/A
Vulnerability Type
N/A