In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: only mark 'subflow' endp as available
Adding the following warning ...
WARN_ON_ONCE(msk->pm.local_addr_used == 0)
... before decrementing the local_addr_used counter helped to find a bug when running the "remove single address" subtest from the mptcp_join.sh selftests.
Removing a 'signal' endpoint will trigger the removal of all subflows linked to this endpoint via mptcp_pm_nl_rm_addr_or_subflow() with rm_type == MPTCP_MIB_RMSUBFLOW. This will decrement the local_addr_used counter, which is wrong in this case because this counter is linked to 'subflow' endpoints, and here it is a 'signal' endpoint that is being removed.
Now, the counter is decremented, only if the ID is being used outside of mptcp_pm_nl_rm_addr_or_subflow(), only for 'subflow' endpoints, and if the ID is not 0 -- local_addr_used is not taking into account these ones. This marking of the ID as being available, and the decrement is done no matter if a subflow using this ID is currently available, because the subflow could have been closed before.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 11, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1019-nvidia-lowlatency | Dec 13, 2024 | Sep 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub