Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85505
HistoryNov 30, 2022 - 12:00 a.m.

Linux kernel MPTCP protocol denial of service vulnerability

2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
linux kernel
mptcp protocol
denial-of-service
vulnerability
null pointer dereference
subflow list
local attackers
exploitation
disconnection

0.0004 Low

EPSS

Percentile

5.1%

Linux kernel is the kernel used by the Linux Foundation’s open source operating system Linux. mptcp_protocol 5.19 or earlier has a denial-of-service vulnerability that stems from a null pointer dereference in the MPTCP protocol when traversing the subflow list upon disconnection, which can be exploited by local attackers to launch denial-of-service attacks.

CPENameOperatorVersion
linux mptcp_protocollt5.19