● Ubuntu USN · May 2026

Ubuntu Linux Security Advisory: May 2026 Kernel TLS Zero-Copy Triage

Triage of Ubuntu's May 2026 kernel advisory addressing Kernel TLS zero-copy use-after-free and cryptographic session race conditions.

31
Kernel CVEs Fixed
1
Kernel TLS Flaw
7.8
CVSS Score
High
Web Server Fleet Action

सुरक्षा समीक्षा और जोखिम विश्लेषण

Canonical patched CVE-2024-26584 in the Linux Kernel TLS (ktls) subsystem. A race condition during asynchronous crypto completion allowed malicious sockets to trigger a slab use-after-free and corrupt kernel memory.

संवेदनशील कमियों की विस्तृत तालिका

CVE पहचानकर्ता सबसिस्टम / घटक प्रभाव CVSS सक्रिय हमला?
CVE-2024-26584Kernel TLS (net/tls)Use-After-Free Race7.8 HighYES (Targeted Exploit)
CVE-2024-26585Btrfs FilesystemUse-After-Free on Unmount6.2 MediumNo
CVE-2024-26586HID Device DriverInteger Overflow5.4 MediumNo
सोर्स कोड का गहन विश्लेषण

Deep Dive: Linux Kernel TLS Subsystem Use-After-Free Teardown →

Analyze the C commit in net/tls/tls_sw.c fixing asynchronous page reference counting during zero-copy transmission.

← सम्पूर्ण सुरक्षा निर्देशिका सभी सुरक्षा पैच अपडेट्स →