Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-58239— tls: stop recv() if initial process_rx_list gave us non-DATA

Quick assessment

Affected
Linux Linux
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于tls模块处理非DATA记录不当，可能导致数据合并错误。

CVSS 8.2 · High EPSS 0.36% · P29

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux 692d7b5d1f9125a1cf0595e979e3b5fb7210547e< f310143961e2d9a0479fca117ce869f8aaecc140 affected
692d7b5d1f9125a1cf0595e979e3b5fb7210547e< 31e10d6cb0c9532ff070cf50da1657c3acee9276 affected
692d7b5d1f9125a1cf0595e979e3b5fb7210547e< 4338032aa90bd1d5b33a4274e8fa8347cda5ee09 affected
692d7b5d1f9125a1cf0595e979e3b5fb7210547e< 6756168add1c6c3ef1c32c335bb843a5d1f99a75 affected
692d7b5d1f9125a1cf0595e979e3b5fb7210547e< 3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f affected
692d7b5d1f9125a1cf0595e979e3b5fb7210547e< a4ed943882a8fc057ea5a67643314245e048bbdd affected
692d7b5d1f9125a1cf0595e979e3b5fb7210547e< fdfbaec5923d9359698cbb286bc0deadbb717504 affected
5.1 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-58239

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
tls: stop recv() if initial process_rx_list gave us non-DATA
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx_list and another record of the same type still on the queue, we will end up merging them: - process_rx_list copies the non-DATA record - we start the loop and process the first available record since it's of the same type - we break out of the loop since the record was not DATA Just check the record type and jump to the end in case process_rx_list did some work.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于tls模块处理非DATA记录不当，可能导致数据合并错误。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 692d7b5d1f9125a1cf0595e979e3b5fb7210547e ~ f310143961e2d9a0479fca117ce869f8aaecc140 -
Linux Linux 5.1 -

II. Public POCs for CVE-2024-58239

# POC Description Source Link Shenlong Link
1 None https://github.com/khoatran107/cve-2024-58239 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-58239

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-58239 (1)

Same Patch Batch · Linux · 2025-08-22 · 60 CVEs total

CVE-2025-38660 9.8 CRITICAL [ceph] parse_longname(): strrchr() expects NUL-terminated string
CVE-2025-38643 8.8 HIGH wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
CVE-2025-38658 8.8 HIGH nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails
CVE-2025-38616 7.8 HIGH tls: handle data disappearing from under the TLS ULP
CVE-2025-38617 7.8 HIGH net/packet: fix a race in packet_set_ring() and packet_notifier()
CVE-2025-38618 7.8 HIGH vsock: Do not allow binding to VMADDR_PORT_ANY
CVE-2025-38640 7.8 HIGH bpf: Disable migration in nf_hook_run_bpf().
CVE-2025-38670 7.8 HIGH arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
CVE-2025-38619 7.8 HIGH media: ti: j721e-csi2rx: fix list_del corruption
CVE-2025-38667 7.8 HIGH iio: fix potential out-of-bound write
CVE-2025-38675 7.8 HIGH xfrm: state: initialize state_ptrs earlier in xfrm_state_find
CVE-2025-38653 7.8 HIGH proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
CVE-2025-38627 7.8 HIGH f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
CVE-2025-38656 7.8 HIGH wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
CVE-2025-38659 7.8 HIGH gfs2: No more self recovery
CVE-2025-38652 7.3 HIGH f2fs: fix to avoid out-of-boundary access in devs.path
CVE-2025-38657 7.3 HIGH wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()
CVE-2025-38639 7.1 HIGH netfilter: xt_nfacct: don't assume acct name is null-terminated
CVE-2025-38661 7.1 HIGH platform/x86: alienware-wmi-wmax: Fix `dmi_system_id` array
CVE-2025-38662 7.1 HIGH ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv

Showing top 20 of 60 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-58239

No comments yet

Leave a comment