In the Linux kernel, the following vulnerability has been resolved:
mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs.
A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones.
Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf().
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-toolsUpgrade rvUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rtla | Jan 9, 2025 | Dec 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-devel | Mar 14, 2025 | Dec 2, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel | Mar 27, 2025 | Dec 2, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 9, 2024 | Dec 2, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 10, 2025 | Dec 2, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 10, 2025 | Dec 2, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel | Jan 13, 2025 | Dec 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-intelUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-realtime | Feb 20, 2025 | Dec 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Dec 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub