tls: get psock ref after taking rxlock to avoid leak
At a glance
Severity
Not available
EPSS
EPSS 0.21 % · percentile 11 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved:
tls: get psock ref after taking rxlock to avoid leak
At the start of tls_sw_recvmsg, we take a reference on the psock, and
then call tls_rx_reader_lock. If that fails, we return directly
without releasing the reference.
Instead of adding a new label, just take the reference after locking
has succeeded, since we don't need it before.