CVE - CVE-2024-35840

CVE-ID
CVE-2024-35840	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() subflow_finish_connect() uses four fields (backup, join_id, thmac, none) that may contain garbage unless OPTION_MPTCP_MPJ_SYNACK has been set in mptcp_parse_option()
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/413b913507326972135d2977975dbff8b7f2c453 URL:https://git.kernel.org/stable/c/413b913507326972135d2977975dbff8b7f2c453 MISC:https://git.kernel.org/stable/c/51e4cb032d49ce094605f27e45eabebc0408893c URL:https://git.kernel.org/stable/c/51e4cb032d49ce094605f27e45eabebc0408893c MISC:https://git.kernel.org/stable/c/76e8de7273a22a00d27e9b8b7d4d043d6433416a URL:https://git.kernel.org/stable/c/76e8de7273a22a00d27e9b8b7d4d043d6433416a MISC:https://git.kernel.org/stable/c/ad3e8f5c3d5c53841046ef7a947c04ad45a20721 URL:https://git.kernel.org/stable/c/ad3e8f5c3d5c53841046ef7a947c04ad45a20721 MISC:https://git.kernel.org/stable/c/be1d9d9d38da922bd4beeec5b6dd821ff5a1dfeb URL:https://git.kernel.org/stable/c/be1d9d9d38da922bd4beeec5b6dd821ff5a1dfeb
Assigning CNA
kernel.org
Date Record Created
20240517	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240517)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)