UBUNTU-CVE-2024-26708

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

CVE-2024-26708 mptcp: really cope with fastopen race

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

CVE-2024-26708 mptcp: really cope with fastopen race

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

CVE-2024-26708

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

CVE-2024-26708

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

CVE-2024-26708 mptcp: really cope with fastopen race

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

CVE-2024-26708: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

kernel: Linux kernel: Denial of Service due to NULL pointer dereference in mptcp fastopen

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. During an early fallback to TCP in the fastopen process, the system incorrectly deletes a subflow context before it is no longer needed. This can lead to a NULL pointer dereference, allowing a local attacker with low...

kernel: tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopenblackholetimeout. While reading sysctltcpfastopenblackholetimeout, it can be changed concurrently. Thus, we need to add READONCE to its readers...

kernel: tcp: Fix data-races around sysctl_tcp_fastopen.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopen. While reading sysctltcpfastopen, it can be changed concurrently. Thus, we need to add READONCE to its readers...

PT-2025-8518 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists in the Linux kernel related to the sysctl tcp fastopen blackhole timeout variable. This issue occurs because the variable can be changed concurrently while bei...

PT-2025-8519 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around sysctl tcp fastopen in the Linux kernel. The value of sysctl tcp fastopen can be changed concurrently while it is being read, which requires the use of...

PT-2022-33037

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue concerns a data-race around sysctl tcp fastopen in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-32790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue concerns a data-race around sysctl tcp fastopen in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-32934

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue concerns a data-race around sysctl tcp fastopen in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32381

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around sysctl tcp fastopen in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32380

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around the sysctl tcp fastopen blackhole timeout in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-32604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around the sysctl tcp fastopen blackhole timeout in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-32789

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue concerns a data-race around the sysctl tcp fastopen blackhole timeout in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-32605

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl tcp fastopen in the tcp module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...