Critical Slab-Out-of-Bounds Vulnerability Resolved in Linux Kernel's TLS Module

What changed

The Linux kernel has patched a critical vulnerability associated with the TLS module, specifically in the decrypt_internal function. This issue stemmed from a mismatch in memory size allocation, leading to a slab-out-of-bounds error during decryption operations.

The vulnerability arose due to the memory size of tls_ctx->rx.iv being set to 12 bytes for AES128-CCM, while the expected size from the crypto_aead_ivsize() function was 16 bytes. This discrepancy could allow for unauthorized memory access, posing a serious risk.

Who is affected

Various systems utilizing the Linux kernel's TLS module are impacted by this vulnerability. Users and organizations relying on affected versions may face security risks if not updated promptly.

• Linux kernel users implementing TLS for secure communications.
• Organizations using Linux-based servers for web applications.
• Developers integrating TLS functionalities in their applications.
• Network administrators managing Linux environments with TLS configurations.

What to do

It is crucial for affected users and organizations to update their Linux kernel to the latest version to mitigate the risks associated with this vulnerability. Regularly monitoring security advisories and applying patches promptly can significantly enhance system security.

Additionally, reviewing existing TLS configurations and conducting security audits can help identify other potential vulnerabilities.