Race condition

The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart...

Memory corruption

The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks...

CVE-2022-39005

The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks...

CVE-2022-39005

Technical details (affected products, versions, root cause, exploit information) are not publicly available in the provided documents; monitor for updates.

CVE-2022-39004

The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks...

CVE-2022-39004

CVE-2022-39004 concerns a memory-leak vulnerability in the Huawei HarmonyOS MPTCP module. Multiple sources (NVD, RH/Red Hat, CNVD) describe that the issue stems from the MPTCP component not releasing dynamically allocated heap memory, leading to memory leaks when exploited. The NVD entry assigns ...

CVE-2022-39006

CVE-2022-39006 concerns the MPTCP module in Huawei HarmonyOS, described as a race-condition vulnerability that can cause a device reboot/restart if exploited. The entry lists a CVSS 3.1 base score of 5.9 (Medium), with network attack vector, high attack complexity, no privileges required, and no ...

CVE-2022-39006

The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart...

PT-2022-33416 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.3 Description: The issue is related to the mptcp protocol, where data is not properly handled on closed subflows. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-33417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns the mptcp subflow cleanup in the mptcp destroy common function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

Huawei HarmonyOS Conditional Competition Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. A conditional contention vulnerability exists in Huawei HarmonyOS, which stems from improper handling of concurrent accesses when concurrent code needs to access...

Huawei HarmonyOS Memory Leak Vulnerability (CNVD-2022-64983)

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based, fully distributed operating system. A memory leak vulnerability exists in Huawei HarmonyOS, which stems from the MPTCP module not releasing or failing to release dynamically allocated heap memory. An...

Unbreakable Enterprise kernel-container security update

5.15.0-1.43.4.1 - netsched: clsroute: remove from list when handle is 0 Thadeu Lima de Souza Cascardo Orabug: 34460936 CVE-2022-2588 5.15.0-1.43.4 - Revert selftests/bpf: add tests verifying unprivileged bpf behaviour Alan Maguire Orabug: 34399286 - Revert selftests/bpf: Add test for reg2btfids o...

PT-2025-25997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the MPTCP protocol. When the mptcp socket creation fails due to a CGROUP INET SOCK CREATE eBPF program, the MPTCP protocol leaks...

GSD-2022-1004232 mptcp: fix race on unaccepted mptcp sockets

mptcp: fix race on unaccepted mptcp sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...

GSD-2022-1001513 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb

mptcp: Fix crash due to tcptsortedanchor was initialized before release skb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001196 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb

mptcp: Fix crash due to tcptsortedanchor was initialized before release skb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1000765 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

mptcp: Correctly set DATAFIN timeout when number of retransmits is large This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit...

GSD-2022-1000695 mptcp: Correctly set DATA_FIN timeout when number of retransmits is large

mptcp: Correctly set DATAFIN timeout when number of retransmits is large This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.13 by commit...

CVE-2021-40037

There is a Vulnerability of accessing resources using an incompatible type type confusion in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart...