CVE-2022-39004

The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks...

CVE-2022-39004

CVE-2022-39004 concerns a memory-leak vulnerability in the Huawei HarmonyOS MPTCP module. Multiple sources (NVD, RH/Red Hat, CNVD) describe that the issue stems from the MPTCP component not releasing dynamically allocated heap memory, leading to memory leaks when exploited. The NVD entry assigns ...

CVE-2022-39006

The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart...

CVE-2022-39006

CVE-2022-39006 concerns the MPTCP module in Huawei HarmonyOS, described as a race-condition vulnerability that can cause a device reboot/restart if exploited. The entry lists a CVSS 3.1 base score of 5.9 (Medium), with network attack vector, high attack complexity, no privileges required, and no ...

PT-2022-24662

Name of the Vulnerable Software and Affected Versions MPTCP module affected versions not specified Description The MPTCP module has a memory leak issue. Successful exploitation of this issue can cause memory leaks. Recommendations At the moment, there is no information about a newer version that...

PT-2022-33416 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.3 Description: The issue is related to the mptcp protocol, where data is not properly handled on closed subflows. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-33417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns the mptcp subflow cleanup in the mptcp destroy common function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2022-39004: Missing Release of Memory after Effective Lifetime

The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks...

CVE-2022-39005: Missing Release of Memory after Effective Lifetime

The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks...

CVE-2022-39006: Concurrent Execution using Shared Resource with Improper Synchronization

The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart...

PT-2022-24663

Name of the Vulnerable Software and Affected Versions MPTCP module affected versions not specified Description The MPTCP module has a race condition issue. Successful exploitation of this issue may cause the device to restart. Recommendations At the moment, there is no information about a newer...

PT-2022-24661

Name of the Vulnerable Software and Affected Versions MPTCP module affected versions not specified Description The issue is related to a memory leak in the MPTCP module. Successful exploitation can cause memory leaks. Recommendations At the moment, there is no information about a newer version th...

Huawei HarmonyOS Conditional Competition Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. A conditional contention vulnerability exists in Huawei HarmonyOS, which stems from improper handling of concurrent accesses when concurrent code needs to access...

Huawei HarmonyOS Memory Leak Vulnerability (CNVD-2022-64983)

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based, fully distributed operating system. A memory leak vulnerability exists in Huawei HarmonyOS, which stems from the MPTCP module not releasing or failing to release dynamically allocated heap memory. An...

Unbreakable Enterprise kernel-container security update

5.15.0-1.43.4.1 - netsched: clsroute: remove from list when handle is 0 Thadeu Lima de Souza Cascardo Orabug: 34460936 CVE-2022-2588 5.15.0-1.43.4 - Revert selftests/bpf: add tests verifying unprivileged bpf behaviour Alan Maguire Orabug: 34399286 - Revert selftests/bpf: Add test for reg2btfids o...

PT-2025-25997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the MPTCP protocol. When the mptcp socket creation fails due to a CGROUP INET SOCK CREATE eBPF program, the MPTCP protocol leaks...

PT-2022-37871

Уязвимость функций mptcp sendmsg frag и mptcp subflow get send модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с недостаточной блокировкой ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность,...

GSD-2022-1004232 mptcp: fix race on unaccepted mptcp sockets

mptcp: fix race on unaccepted mptcp sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...

PT-2022-32494

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description A race condition exists on unaccepted mptcp sockets. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.10, update to...

GSD-2022-1001513 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb

mptcp: Fix crash due to tcptsortedanchor was initialized before release skb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...