● Ubuntu USN · May 2026

Ubuntu Linux Security Advisory: May 2026 Kernel TLS Zero-Copy Triage

Triage of Ubuntu's May 2026 kernel advisory addressing Kernel TLS zero-copy use-after-free and cryptographic session race conditions.

31
Kernel CVEs Fixed
1
Kernel TLS Flaw
7.8
CVSS Score
High
Web Server Fleet Action

보안 릴리스 분석 및 위험성 평가

Canonical patched CVE-2024-26584 in the Linux Kernel TLS (ktls) subsystem. A race condition during asynchronous crypto completion allowed malicious sockets to trigger a slab use-after-free and corrupt kernel memory.

핵심 취약점 트리아지 매트릭스

CVE 식별자 서브시스템 / 구성 요소 영향 CVSS 실제 악용 여부?
CVE-2024-26584Kernel TLS (net/tls)Use-After-Free Race7.8 HighYES (Targeted Exploit)
CVE-2024-26585Btrfs FilesystemUse-After-Free on Unmount6.2 MediumNo
CVE-2024-26586HID Device DriverInteger Overflow5.4 MediumNo
주목할 코드 분석

Deep Dive: Linux Kernel TLS Subsystem Use-After-Free Teardown →

Analyze the C commit in net/tls/tls_sw.c fixing asynchronous page reference counting during zero-copy transmission.

← 전체 보안 디렉터리 보기 모든 플랫폼 보안 업데이트 →