In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix data re-injection from stale subflow
When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoid acquiring unneeded locks, it first try to check if any unacked data is present at all in the RTX queue, but such check is currently broken, as it uses TCP-specific helper on an MPTCP socket.
Funnily enough fuzzers and static checkers are happy, as the accessed memory still belongs to the mptcp_sock struct, and even from a functional perspective the recovery completed successfully, as the short-cut test always failed.
A recent unrelated TCP change - commit d5fed5addb2b ("tcp: reorganize tcp_sock fast path variables") - exposed the issue, as the tcp field reorganization makes the mptcp code always skip the re-inection.
Fix the issue dropping the bogus call: we are on a slow path, the early optimization proved once again to be evil.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade rtla | Jul 3, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.149-99.161Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Aug 28, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-headers | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 3, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade rv | Jul 16, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dtb-armUpgrade dtb-amazonUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kselftests-kmp-64kb | Aug 8, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-kvmUpgrade linux-image-starfive | May 17, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub