CVE-2024-26585 tls: fix race between tx work scheduling and socket close

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple TLS Vulnerabilities Identified in Microsoft Products Microsoft has published information on three vulnerabilities in its TLS implementation, identified as CVE-2024-26582, CVE-2024-26584, and CVE-2024-26585. These vulnerabilities include a use-after-free issue, a problem with backlogging of crypto requests, and a race condition during socket closure, affecting the security of network communications. 3 sources 39