CVE - CVE-2024-53122

CVE-ID
CVE-2024-53122	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/24995851d58c4a205ad0ffa7b2f21e479a9c8527 URL:https://git.kernel.org/stable/c/24995851d58c4a205ad0ffa7b2f21e479a9c8527 MISC:https://git.kernel.org/stable/c/aad6412c63baa39dd813e81f16a14d976b3de2e8 URL:https://git.kernel.org/stable/c/aad6412c63baa39dd813e81f16a14d976b3de2e8 MISC:https://git.kernel.org/stable/c/ce7356ae35943cc6494cc692e62d51a734062b7d URL:https://git.kernel.org/stable/c/ce7356ae35943cc6494cc692e62d51a734062b7d MISC:https://git.kernel.org/stable/c/ff825ab2f455299c0c7287550915a8878e2a66e0 URL:https://git.kernel.org/stable/c/ff825ab2f455299c0c7287550915a8878e2a66e0
Assigning CNA
kernel.org
Date Record Created
20241119	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241119)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)