● Ubuntu USN · May 2026

Ubuntu Linux Security Advisory: May 2026 Kernel TLS Zero-Copy Triage

Triage of Ubuntu's May 2026 kernel advisory addressing Kernel TLS zero-copy use-after-free and cryptographic session race conditions.

31
Kernel CVEs Fixed
1
Kernel TLS Flaw
7.8
CVSS Score
High
Web Server Fleet Action

Анализ рисков и вердикт безопасности

Canonical patched CVE-2024-26584 in the Linux Kernel TLS (ktls) subsystem. A race condition during asynchronous crypto completion allowed malicious sockets to trigger a slab use-after-free and corrupt kernel memory.

Матрица приоритизации уязвимостей

Идентификатор CVE Подсистема / Компонент Последствия CVSS Активная эксплуатация?
CVE-2024-26584Kernel TLS (net/tls)Use-After-Free Race7.8 HighYES (Targeted Exploit)
CVE-2024-26585Btrfs FilesystemUse-After-Free on Unmount6.2 MediumNo
CVE-2024-26586HID Device DriverInteger Overflow5.4 MediumNo
РАЗБОР ИСХОДНОГО КОДА

Deep Dive: Linux Kernel TLS Subsystem Use-After-Free Teardown →

Analyze the C commit in net/tls/tls_sw.c fixing asynchronous page reference counting during zero-copy transmission.

← Полный каталог уязвимостей Все бюллетени безопасности →