In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix data re-injection from stale subflow
When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoid acquiring unneeded locks, it first try to check if any unacked data is present at all in the RTX queue, but such check is currently broken, as it uses TCP-specific helper on an MPTCP socket.
Funnily enough fuzzers and static checkers are happy, as the accessed memory still belongs to the mptcp_sock struct, and even from a functional perspective the recovery completed successfully, as the short-cut test always failed.
A recent unrelated TCP change - commit d5fed5addb2b ("tcp: reorganize tcp_sock fast path variables") - exposed the issue, as the tcp field reorganization makes the mptcp code always skip the re-inection.
Fix the issue dropping the bogus call: we are on a slow path, the early optimization proved once again to be evil.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-core | Jul 3, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.149-99.161Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headers | Aug 28, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade perfUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade libperfUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-devel | Jul 16, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-docsUpgrade ocfs2-kmp-rt | Aug 8, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidia | May 17, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub