https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:27:35 +0000 https://cve.radiocsirt.org/vuln/cve-2024-26831 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/handshake: Fix handshake_req_destroy_test1</p> <p>Recently, handshake_req_destroy_test1 started failing:</p> <p>Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works</p> <p>This is because &#34;sock_release(sock)&#34; was replaced with &#34;fput(filp)&#34; to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.</p> <p>The delay is not consequential in the other cases that were changed but handshake_req_destroy_test1 is testing that handshake_req_cancel() followed by closing the file actually does call the -&gt;hp_destroy method. Thus the PTR_EQ test at the end has to be sure that the final close is complete before it checks the pointer.</p> <p>We cannot use a completion here because if -&gt;hp_destroy is never called (ie, there is an API bug) then the test will hang.</p> <p>Reported by: Guenter Roeck &lt;linux@roeck-us.net&gt;</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/handshake: Fix handshake_req_destroy_test1</p> <p>Recently, handshake_req_destroy_test1 started failing:</p> <p>Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works</p> <p>This is because &#34;sock_release(sock)&#34; was replaced with &#34;fput(filp)&#34; to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.</p> <p>The delay is not consequential in the other cases that were changed but handshake_req_destroy_test1 is testing that handshake_req_cancel() followed by closing the file actually does call the -&gt;hp_destroy method. Thus the PTR_EQ test at the end has to be sure that the final close is complete before it checks the pointer.</p> <p>We cannot use a completion here because if -&gt;hp_destroy is never called (ie, there is an API bug) then the test will hang.</p> <p>Reported by: Guenter Roeck &lt;linux@roeck-us.net&gt;</p> https://cve.radiocsirt.org/vuln/cve-2024-26831