GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-58239 (GCVE-0-2024-58239)

Vulnerability from cvelistv5 – Published: 2025-08-22 13:01 – Updated: 2026-08-05 11:47
VLAI
Title
tls: stop recv() if initial process_rx_list gave us non-DATA
Summary
In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx_list and another record of the same type still on the queue, we will end up merging them: - process_rx_list copies the non-DATA record - we start the loop and process the first available record since it's of the same type - we break out of the loop since the record was not DATA Just check the record type and jump to the end in case process_rx_list did some work.
Severity
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < f310143961e2d9a0479fca117ce869f8aaecc140 (git)
Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < 31e10d6cb0c9532ff070cf50da1657c3acee9276 (git)
Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < 4338032aa90bd1d5b33a4274e8fa8347cda5ee09 (git)
Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < 6756168add1c6c3ef1c32c335bb843a5d1f99a75 (git)
Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < 3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f (git)
Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < a4ed943882a8fc057ea5a67643314245e048bbdd (git)
Affected: 692d7b5d1f9125a1cf0595e979e3b5fb7210547e , < fdfbaec5923d9359698cbb286bc0deadbb717504 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.1
Unaffected: 0 , < 5.1 (semver)
Unaffected: 5.4.270 , ≤ 5.4.* (semver)
Unaffected: 5.10.211 , ≤ 5.10.* (semver)
Unaffected: 5.15.150 , ≤ 5.15.* (semver)
Unaffected: 6.1.80 , ≤ 6.1.* (semver)
Unaffected: 6.6.19 , ≤ 6.6.* (semver)
Unaffected: 6.7.7 , ≤ 6.7.* (semver)
Unaffected: 6.8 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/tls/tls_sw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f310143961e2d9a0479fca117ce869f8aaecc140",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            },
            {
              "lessThan": "31e10d6cb0c9532ff070cf50da1657c3acee9276",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            },
            {
              "lessThan": "4338032aa90bd1d5b33a4274e8fa8347cda5ee09",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            },
            {
              "lessThan": "6756168add1c6c3ef1c32c335bb843a5d1f99a75",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            },
            {
              "lessThan": "3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            },
            {
              "lessThan": "a4ed943882a8fc057ea5a67643314245e048bbdd",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            },
            {
              "lessThan": "fdfbaec5923d9359698cbb286bc0deadbb717504",
              "status": "affected",
              "version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/tls/tls_sw.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "lessThan": "5.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.211",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.150",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.80",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.270",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.211",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.150",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.80",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.19",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.7",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8",
                  "versionStartIncluding": "5.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: stop recv() if initial process_rx_list gave us non-DATA\n\nIf we have a non-DATA record on the rx_list and another record of the\nsame type still on the queue, we will end up merging them:\n - process_rx_list copies the non-DATA record\n - we start the loop and process the first available record since it\u0027s\n   of the same type\n - we break out of the loop since the record was not DATA\n\nJust check the record type and jump to the end in case process_rx_list\ndid some work."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug lives in net/tls (kTLS) receive processing and is driven entirely by the sequence and types of TLS records a remote peer transmits over the network. Any kTLS-enabled endpoint (OpenSSL/nginx offload, NVMe-TCP target, NFS/RPC-with-TLS, tlshd-provisioned sockets) is reachable from the network.\nAC:L - The attacker simply sends two same-type non-DATA records back-to-back, and can force the required \"leftover record on rx_list\" precondition by making the first control record larger than the reader\u0027s buffer (partially_consumed \u2192 put_on_rx_list). There is no race, no memory-layout dependency, and no timing window to win.\nPR:N - The attacker only needs to be the TLS peer on an established session; on a public kTLS server the handshake is server-authenticated only, so any anonymous client can complete it and then emit arbitrary post-handshake alert/handshake records. No privileges or accounts on the target host are required.\nUI:N - The vulnerable path is the target\u0027s ordinary recvmsg() server loop; no victim action beyond normal socket reads is needed. The remote peer triggers it purely by its own record transmission pattern.\nS:U - The consequences are confined to the affected socket and the kernel/process security authority that owns it. No VM, IOMMU, or sandbox boundary is crossed.\nC:N - Only the attacker\u0027s own decrypted record payload is delivered to the consumer; all copies remain bounded by the caller-supplied len, so no kernel memory, uninitialized data, or other-session content is exposed.\nI:L - A remote peer can make the kernel coalesce two distinct TLS control records into one recvmsg() under a single TLS_GET_RECORD_TYPE cmsg with no intervening record boundary, corrupting the protocol message stream handed to the consumer \u2014 e.g. tls_alert_recv() parses only the first two bytes, letting a fatal alert be hidden behind a preceding warning alert. The modification is real but limited to attacker-supplied control-message framing, not arbitrary data or control-flow.\nA:H - With MSG_WAITALL, target is derived from the full requested length before len -= copied, so after process_rx_list returns a complete control record the loop re-enters tls_rx_rec_wait() and blocks indefinitely (default SO_RCVTIMEO of 0) instead of returning the record. The wedged reader holds ctx-\u003ereader_present, so every other thread reading that socket also stalls in tls_rx_reader_acquire(), and a remote peer can repeat this across connections to hang service threads."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:47:49.124Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f310143961e2d9a0479fca117ce869f8aaecc140"
        },
        {
          "url": "https://git.kernel.org/stable/c/31e10d6cb0c9532ff070cf50da1657c3acee9276"
        },
        {
          "url": "https://git.kernel.org/stable/c/4338032aa90bd1d5b33a4274e8fa8347cda5ee09"
        },
        {
          "url": "https://git.kernel.org/stable/c/6756168add1c6c3ef1c32c335bb843a5d1f99a75"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f"
        },
        {
          "url": "https://git.kernel.org/stable/c/a4ed943882a8fc057ea5a67643314245e048bbdd"
        },
        {
          "url": "https://git.kernel.org/stable/c/fdfbaec5923d9359698cbb286bc0deadbb717504"
        }
      ],
      "title": "tls: stop recv() if initial process_rx_list gave us non-DATA",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-58239",
    "datePublished": "2025-08-22T13:01:17.440Z",
    "dateReserved": "2025-04-16T07:19:43.804Z",
    "dateUpdated": "2026-08-05T11:47:49.124Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-58239",
      "date": "2026-09-16",
      "epss": "0.00346",
      "percentile": "0.28062"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-58239\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-08-22T14:15:45.840\",\"lastModified\":\"2026-08-04T11:22:40.597\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ntls: stop recv() if initial process_rx_list gave us non-DATA\\n\\nIf we have a non-DATA record on the rx_list and another record of the\\nsame type still on the queue, we will end up merging them:\\n - process_rx_list copies the non-DATA record\\n - we start the loop and process the first available record since it\u0027s\\n   of the same type\\n - we break out of the loop since the record was not DATA\\n\\nJust check the record type and jump to the end in case process_rx_list\\ndid some work.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tls: detener recv() si el proceso inicial process_rx_list nos dio un valor que no es DATA Si tenemos un registro que no es DATA en rx_list y otro registro del mismo tipo todav\u00eda en la cola, terminaremos fusion\u00e1ndolos: - process_rx_list copia el registro que no es DATA - iniciamos el bucle y procesamos el primer registro disponible ya que es del mismo tipo - salimos del bucle ya que el registro no era DATA Simplemente verifique el tipo de registro y salte al final en caso de que process_rx_list haya hecho alg\u00fan trabajo.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/tls/tls_sw.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"f310143961e2d9a0479fca117ce869f8aaecc140\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"31e10d6cb0c9532ff070cf50da1657c3acee9276\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"4338032aa90bd1d5b33a4274e8fa8347cda5ee09\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"6756168add1c6c3ef1c32c335bb843a5d1f99a75\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"a4ed943882a8fc057ea5a67643314245e048bbdd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"692d7b5d1f9125a1cf0595e979e3b5fb7210547e\",\"lessThan\":\"fdfbaec5923d9359698cbb286bc0deadbb717504\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/tls/tls_sw.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.1\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.1\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.270\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.211\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.150\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.80\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.19\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7.7\",\"lessThanOrEqual\":\"6.7.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.1\",\"versionEndExcluding\":\"5.4.270\",\"matchCriteriaId\":\"D84E662B-8585-476F-AC76-EA28993BDFD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.211\",\"matchCriteriaId\":\"7DDA4DCF-671D-415D-94DF-6E3C77DF0704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.150\",\"matchCriteriaId\":\"CB6C60DE-9E0C-46C5-904D-D4F4031F8E95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.80\",\"matchCriteriaId\":\"BA7850CE-97C9-4408-A348-6173296BCA2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.19\",\"matchCriteriaId\":\"8D82004C-B2AE-4048-9344-32EFF65953B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.7.7\",\"matchCriteriaId\":\"575EE16B-67F2-4B5B-B5F8-1877715C898B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9F4EA73-0894-400F-A490-3A397AB7A517\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"056BD938-0A27-4569-B391-30578B309EE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F02056A5-B362-4370-9FF8-6F0BD384D520\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"62075ACE-B2A0-4B16-829D-B3DA5AE5CC41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"A780F817-2A77-4130-A9B7-5C25606314E3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/31e10d6cb0c9532ff070cf50da1657c3acee9276\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4338032aa90bd1d5b33a4274e8fa8347cda5ee09\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6756168add1c6c3ef1c32c335bb843a5d1f99a75\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a4ed943882a8fc057ea5a67643314245e048bbdd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f310143961e2d9a0479fca117ce869f8aaecc140\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fdfbaec5923d9359698cbb286bc0deadbb717504\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T14:06:53+00:00",
      "cve": "CVE-2024-58239",
      "id": "CVE-2024-58239",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_affected": "70",
      "product_status:known_not_affected": "126",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: tls: stop recv() if initial process_rx_list gave us non-DATA",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-58239.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-08-29T01:34:17Z",
      "cve": "CVE-2024-58239",
      "id": "CVE-2024-58239",
      "initial_release_date": "2025-08-26T23:26:15Z",
      "product_status:known_affected": "435",
      "product_status:known_not_affected": "235",
      "product_status:recommended": "622",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-58239",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-58239.json",
      "version": "42"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.