CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
In the Linux kernel, the following vulnerability has been resolved:
mptcp: cope racing subflow creation in mptcprcvspaceadjust
Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs.
A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcpcleanuprbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones.
Explicitly check that the subflow is in a suitable state before invoking tcpcleanuprbuf().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53122?
CVE-2024-53122 has been classified with a moderate severity level due to potential impacts on network stability.
How do I fix CVE-2024-53122?
To address CVE-2024-53122, update the Linux kernel to version 6.1.119 or later, or apply the relevant patches provided by your distribution.
Which versions of the Linux kernel are affected by CVE-2024-53122?
CVE-2024-53122 affects Linux kernel versions between 5.10 and 6.11.10, as well as specific 6.12 release candidates.
What areas of the Linux kernel are impacted by CVE-2024-53122?
CVE-2024-53122 impacts the multipath TCP implementation, specifically related to subflow creation.
Is CVE-2024-53122 exploitable remotely?
Yes, CVE-2024-53122 could potentially be exploited remotely, which raises concerns for systems exposed to untrusted networks.