PT-2021-26366

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.14 Description: A potential issue in the mptcp component of the Linux Kernel may cause a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

GSD-2021-1001754 mptcp: ensure tx skbs always have the MPTCP ext

mptcp: ensure tx skbs always have the MPTCP ext This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001754 mptcp: ensure tx skbs always have the MPTCP ext

mptcp: ensure tx skbs always have the MPTCP ext This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

PT-2021-30219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14.7 through v5.14.9 Description The issue concerns the mptcp protocol in the Linux Kernel, where tx skbs may not always have the MPTCP extension. This could potentially lead to security vulnerabilities, although the...

PT-2021-26224

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14.7 through v5.14.9 Description: The issue concerns the mptcp protocol in the Linux Kernel, where tx skbs may not always have the MPTCP extension. This could potentially lead to security vulnerabilities, although the...

PT-2024-11443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a vulnerability that can cause an infinite loop in the recvmsg function if the caller provides the MSG WAITALL flag, the data present in the receive queue is not...

GSD-2021-1001064 mptcp: fix soft lookup in subflow_error_report()

mptcp: fix soft lookup in subflowerrorreport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1001064 mptcp: fix soft lookup in subflow_error_report()

mptcp: fix soft lookup in subflowerrorreport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

GSD-2021-1001062 mptcp: Fix out of bounds when parsing TCP options

mptcp: Fix out of bounds when parsing TCP options This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1001062 mptcp: Fix out of bounds when parsing TCP options

mptcp: Fix out of bounds when parsing TCP options This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1000982 mptcp: Fix out of bounds when parsing TCP options

mptcp: Fix out of bounds when parsing TCP options This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000982 mptcp: Fix out of bounds when parsing TCP options

mptcp: Fix out of bounds when parsing TCP options This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-29529

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.12 Description A potential security issue exists in the Linux Kernel, specifically in the mptcp module, related to a soft lookup in the subflow error report function. The actual impact and attack...

PT-2021-29447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.45 Description The issue is related to a fix for an out of bounds condition when parsing TCP options in the mptcp component. The actual impact and attack plausibility have not yet been proven...

PT-2021-25453

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.10.45 Description: The issue is related to a fix for an out of bounds condition when parsing TCP options in the mptcp component. The actual impact and attack plausibility have not yet been proven...

PT-2021-25533

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.12.13 Description: The issue is related to a fix for an out of bounds error when parsing TCP options in the mptcp component. The actual impact and attack plausibility have not yet been proven...

PT-2021-29527

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.13 Description The issue is related to an out of bounds error when parsing TCP options in the mptcp component. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

UVI-2021-1000794 mptcp: fix sk_forward_memory corruption on retransmission

mptcp: fix skforwardmemory corruption on retransmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

GSD-2021-1000794 mptcp: fix sk_forward_memory corruption on retransmission

mptcp: fix skforwardmemory corruption on retransmission This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

PT-2021-25265

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.9 Description: The issue is related to a potential security problem in the mptcp component of the Linux Kernel, specifically a sk forward memory corruption on retransmission. The actual impact and...