Security tracker / CVE-2024-58053

CVE-2024-58053

rxrpc: Fix handling of received connection abort

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 248f219cb8bc ("rxrpc: Rewrite the data and ack handling code").
 carnil> Vulnerable versions: 4.9.

Bugs

Status

Branch	Status
upstream	released (6.14-rc1) [0e56ebde245e4799ce74d38419426f2a80d39950]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.2) [96d1d927c4d03ee9dcee7640bca70b74e63504fc]
6.12-upstream-stable	released (6.12.13) [5842ce7b120c65624052a8da04460d35b26caac0]
6.6-upstream-stable	released (6.6.76) [9c6702260557c0183d8417c79a37777a3d3e58e8]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.13-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed