In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix data re-injection from stale subflow
When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoid acquiring unneeded locks, it first try to check if any unacked data is present at all in the RTX queue, but such check is currently broken, as it uses TCP-specific helper on an MPTCP socket.
Funnily enough fuzzers and static checkers are happy, as the accessed memory still belongs to the mptcp_sock struct, and even from a functional perspective the recovery completed successfully, as the short-cut test always failed.
A recent unrelated TCP change - commit d5fed5addb2b ("tcp: reorganize tcp_sock fast path variables") - exposed the issue, as the tcp field reorganization makes the mptcp code always skip the re-inection.
Fix the issue dropping the bogus call: we are on a slow path, the early optimization proved once again to be evil.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernelUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-rt-kvmUpgrade kernel-rt-modules | Jul 3, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.149-99.161Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 28, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfo | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade perfUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade perf-debuginfo | Jul 16, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-devel | Aug 8, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-gcp | May 17, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub