Linux Distros Unpatched Vulnerability : CVE-2022-48906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATAFIN timeout when number of retransmits is large Syzkaller with UBSA...

SUSE CVE-2022-48906

In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATAFIN timeout when number of retransmits is large Syzkaller with UBSAN uncovered a scenario where a large number of DATAFIN retransmits caused a shift-out-of-bounds in the DATAFIN timeout calculation:...

UBUNTU-CVE-2022-48906

In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATAFIN timeout when number of retransmits is large Syzkaller with UBSAN uncovered a scenario where a large number of DATAFIN retransmits caused a shift-out-of-bounds in the DATAFIN timeout calculation:...

PT-2022-28969

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.12 Description The issue concerns the mptcp protocol in the Linux Kernel, where the DATA FIN timeout is not correctly set when the number of retransmits is large. The actual impact and attack...

PT-2022-29039

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.26 Description The issue concerns the mptcp protocol, where the DATA FIN timeout is not correctly set when the number of retransmits is large. This is an automated ID intended to aid in discovery of...

PT-2022-7619 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.1 Description: A vulnerability in the Linux kernel's MPTCP component has been identified, where a large number of DATA FIN retransmits can cause a shift-out-of-bounds in the DATA FIN timeout calculation. Th...