● Ubuntu USN · May 2026

Ubuntu Linux Security Advisory: May 2026 Kernel TLS Zero-Copy Triage

Triage of Ubuntu's May 2026 kernel advisory addressing Kernel TLS zero-copy use-after-free and cryptographic session race conditions.

31
Kernel CVEs Fixed
1
Kernel TLS Flaw
7.8
CVSS Score
High
Web Server Fleet Action

漏洞风险分类与修复裁决

Canonical patched CVE-2024-26584 in the Linux Kernel TLS (ktls) subsystem. A race condition during asynchronous crypto completion allowed malicious sockets to trigger a slab use-after-free and corrupt kernel memory.

重点漏洞分类评级矩阵

CVE 编号 核心子系统 / 组件 影响程度 CVSS 是否在野利用？
CVE-2024-26584Kernel TLS (net/tls)Use-After-Free Race7.8 HighYES (Targeted Exploit)
CVE-2024-26585Btrfs FilesystemUse-After-Free on Unmount6.2 MediumNo
CVE-2024-26586HID Device DriverInteger Overflow5.4 MediumNo
深度源码剖析

Deep Dive: Linux Kernel TLS Subsystem Use-After-Free Teardown →

Analyze the C commit in net/tls/tls_sw.c fixing asynchronous page reference counting during zero-copy transmission.

← 浏览完整安全目录 所有平台安全更新 →