---
id: CVE-2024-26585
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tls: fix race between tx work scheduling and socket close

  Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
  may exit as soon as the async crypto ha…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tls: fix race between tx work scheduling and socket close

  Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
  may exit as soon as the async crypto ha…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-362
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 4.20.0, < 6.6.18'
  - 'linux_kernel >= 6.7.0, < 6.7.6'
patched:
  - linux_kernel 6.7.6
published: '2024-02-21'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26585'
references:
  - url: 'https://git.kernel.org/stable/c/196f198ca6fce04ba6ce262f5a0e4d567d7d219d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6db22d6c7a6dc914b12c0469b94eb639b6a8a146'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dd32621f19243f89ce830919496a5dcc2158aa33'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e327ed60bff4a991cd7a709c47c4f0c5b4a4fd57'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/196f198ca6fce04ba6ce262f5a0e4d567d7d219d'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/6db22d6c7a6dc914b12c0469b94eb639b6a8a146'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdb'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e327ed60bff4a991cd7a709c47c4f0c5b4a4fd57'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZOU3745CWCDZ7EMKMXB2OEEIB5Q3IWM/
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00586
epssPercentile: 0.45816
ingestedAt: '2026-08-04T11:39:45.198Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.

## Affected

- `linux_kernel >= 4.20.0, < 6.6.18`
- `linux_kernel >= 6.7.0, < 6.7.6`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.6`
