NetSight
IP …
high8.2

CVE-2024-50185

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS…

Impact

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.7 before 5.10.228
from 5.11 before 5.15.169
from 5.16 before 6.1.113
from 6.2 before 6.6.57
from 6.7 before 6.11.4
Version 6.12

References