CVE-2024-58053

High

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagation bit is performed, the calls aren't then woken up to go and process their termination, and as no further input is forthcoming, they just hang. Also add some tracing for the logging of connection aborts.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux Kernel
PublishedMar 6, 2025
First seenMar 6, 2025

How to fix

Update
  • linux linux_kernel6.6.76, 6.12.13, 6.13.2 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.9 ≤ v < 6.6.76, 6.7 ≤ v < 6.12.13, 6.13 ≤ v < 6.13.26.6.76, 6.12.13, 6.13.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.