● Ubuntu USN · May 2026

Ubuntu Linux Security Advisory: May 2026 Kernel TLS Zero-Copy Triage

Triage of Ubuntu's May 2026 kernel advisory addressing Kernel TLS zero-copy use-after-free and cryptographic session race conditions.

31
Kernel CVEs Fixed
1
Kernel TLS Flaw
7.8
CVSS Score
High
Web Server Fleet Action

Triaje Ejecutivo y Veredicto de Riesgo

Canonical patched CVE-2024-26584 in the Linux Kernel TLS (ktls) subsystem. A race condition during asynchronous crypto completion allowed malicious sockets to trigger a slab use-after-free and corrupt kernel memory.

Matriz Curada de Triaje de Vulnerabilidades

Identificador CVE Subsistema / Componente Impacto CVSS ¿Explotación Activa?
CVE-2024-26584Kernel TLS (net/tls)Use-After-Free Race7.8 HighYES (Targeted Exploit)
CVE-2024-26585Btrfs FilesystemUse-After-Free on Unmount6.2 MediumNo
CVE-2024-26586HID Device DriverInteger Overflow5.4 MediumNo
ANÁLISIS DE CÓDIGO DESTACADO

Deep Dive: Linux Kernel TLS Subsystem Use-After-Free Teardown →

Analyze the C commit in net/tls/tls_sw.c fixing asynchronous page reference counting during zero-copy transmission.

← Explorar Directorio de Seguridad Todas las Actualizaciones de Seguridad →