CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect
In the Linux kernel, the following vulnerability has been resolved:
mptcp: ensure snduna is properly initialized on connect
This is strictly related to commit fb7a0d334894 ("mptcp: ensure sndnxt is properly initialized on connect"). It turns out that syzkaller can trigger the retransmit after fallback and before processing any other incoming packet - so that snduna is still left uninitialized.
Address the issue explicitly initializing snduna together with sndnxt and writeseq.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40931?
CVE-2024-40931 has a medium severity rating due to its potential impact on system stability.
How do I fix CVE-2024-40931?
To fix CVE-2024-40931, you should update the Linux kernel to one of the recommended versions specified in the advisory.
What systems are affected by CVE-2024-40931?
CVE-2024-40931 affects specific versions of the Linux kernel across Red Hat and Debian distributions.
Can CVE-2024-40931 be exploited remotely?
CVE-2024-40931 can potentially be exploited remotely if specific conditions are met.
What is MPTCP in relation to CVE-2024-40931?
MPTCP, or MultiPath TCP, is a protocol whose improper handling in the Linux kernel is addressed by CVE-2024-40931.