GSD-2022-1001196 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb

mptcp: Fix crash due to tcptsortedanchor was initialized before release skb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1000765 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

mptcp: Correctly set DATAFIN timeout when number of retransmits is large This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit...

GSD-2022-1000695 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

mptcp: Correctly set DATAFIN timeout when number of retransmits is large This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...

PT-2022-29039

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.26 Description The issue concerns the mptcp protocol, where the DATA FIN timeout is not correctly set when the number of retransmits is large. This is an automated ID intended to aid in discovery of...

PT-2022-28969

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.12 Description The issue concerns the mptcp protocol in the Linux Kernel, where the DATA FIN timeout is not correctly set when the number of retransmits is large. The actual impact and attack...

PT-2025-8126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash issue has been identified in the Linux kernel related to the mptcp module. The problem occurs when the system is under memory pressure, causing sk wmem schedule to return false,...

CVE-2021-40037

There is a Vulnerability of accessing resources using an incompatible type type confusion in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart...

CVE-2021-40037

There is a Vulnerability of accessing resources using an incompatible type type confusion in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart...

Type confusion

There is a Vulnerability of accessing resources using an incompatible type type confusion in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart...

CVE-2021-40037

Technical details about CVE-2021-40037 are not publicly provided in the connected documents. The available sources note a type-confusion issue in MPTCP on smartphones but do not disclose affected products, versions, impact, or fixes. Monitor for updates.

CVE-2021-40037

There is a Vulnerability of accessing resources using an incompatible type type confusion in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart...

CVE-2021-40037: Access of Resource Using Incompatible Type

There is a Vulnerability of accessing resources using an incompatible type type confusion in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart...

PT-2022-11159

Name of the Vulnerable Software and Affected Versions MPTCP subsystem in smartphones affected versions not specified Description The issue is related to accessing resources using an incompatible type, also known as type confusion, in the MPTCP subsystem. This can cause the system to crash and...

GSD-2021-1002749 mptcp: fix deadlock in __mptcp_push_pending()

mptcp: fix deadlock in mptcppushpending This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002748 mptcp: remove tcp ulp setsockopt support

mptcp: remove tcp ulp setsockopt support This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002746 mptcp: clear 'kern' flag from fallback sockets

mptcp: clear 'kern' flag from fallback sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002745 mptcp: never allow the PM to close a listener subflow

mptcp: never allow the PM to close a listener subflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002701 mptcp: clear 'kern' flag from fallback sockets

mptcp: clear 'kern' flag from fallback sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

PT-2021-27214

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue concerns the mptcp protocol in the Linux Kernel, where the 'kern' flag is not properly cleared from fallback sockets. The actual impact and attack plausibility of this issue have no...

PT-2021-27216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue concerns the removal of TCP ULP setsockopt support in mptcp. It was introduced in version v5.13 and fixed in Linux Kernel version v5.15.11. The actual impact and attack plausibility...