1264 matches found
PT-2021-27169
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue concerns the mptcp protocol in the Linux Kernel, where the 'kern' flag is not properly cleared from fallback sockets. The actual impact and attack plausibility of this issue have no...
PT-2021-27217
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.10 Description A potential issue exists in the mptcp push pending function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-27213
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.10 Description The issue concerns the mptcp protocol, where the PM is never allowed to close a listener subflow. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2021-8214
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the mptcp component of the Linux kernel, where a null pointer dereference can occur in the mptcp supported sockopt function. This can lead to a denial of service...
PT-2021-8229
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the mptcp component of the Linux kernel, which can cause a crash due to a null pointer dereference. This occurs when the sk-sk sock kern flag is not set correctly...
PT-2024-11497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock in the mptcp push pending function, which may call mptcp flush join list with the subflow socket lock held. If this call hits mptcp sockopt sync all,...
PT-2021-8215 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.0-rc4-syzkaller Description: The vulnerability is related to the MPTCP component in the Linux kernel, which can cause a NULL pointer dereference when deleting an endpoint. This can lead to a general...
WS-2021-0544
Linux/Kernel is vulnerable to deadlock in mptcppushpending in net/mptcp/protocol.c...
tcpdump security and bug fix update
14:4.9.3-2 - Resolves: 1860216 - tcpdump can not parse mptcp options - Resolves: 1901635 - ppp decapsulator can be convinced to allocate a large amount of memory - Adding tedude test to gating...
GSD-2021-1002161 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit 612f71d7328c14369924384ad2170aae2a6abd92, i...
UVI-2021-1002161 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit 612f71d7328c14369924384ad2170aae2a6abd92, i...
GSD-2021-1002092 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 1a4554e94f0deff9fc1dc5addf93fa579cc29711...
UVI-2021-1002092 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 1a4554e94f0deff9fc1dc5addf93fa579cc29711...
PT-2021-26631
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.15 Description: A potential issue in the mptcp component of the Linux Kernel may cause a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2021-26562
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential issue exists in the mptcp component, which could lead to a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-30557
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential issue exists in the mptcp component, which could lead to a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-30626
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15 Description A potential issue in the mptcp component of the Linux Kernel may cause a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
GSD-2021-1001896 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 1a4554e94f0deff9fc1dc5addf93fa579cc29711...
UVI-2021-1001896 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 1a4554e94f0deff9fc1dc5addf93fa579cc29711...
PT-2021-30361
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential issue exists in the mptcp component, which could lead to a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...