SUSE-SU-2025:20270-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. - CVE-2024-26708: mptcp: fix inconsistent state on fastopen race...

Linux Distros Unpatched Vulnerability : CVE-2024-45009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: only decrement addaddraccepted for MPJ req Adding the following warning ... WARNONONCEmsk-pm.addaddraccepted == 0 ... before decrementing the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-45009)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45009 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement addaddraccepte...

CVE-2024-45009 affecting package kernel for versions less than 6.6.51.1-1

CVE-2024-45009 affecting package kernel for versions less than 6.6.51.1-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-45009)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45009 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement addaddraccepte...

CVE-2024-45009 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-45009 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2024-45009

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement addaddraccepted for MPJ req Adding the following warning ... WARNONONCEmsk-pm.addaddraccepted == 0 ... before decrementing the addaddraccepted counter helped to find a bug when running the "remove single...

CVE-2024-45009

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement addaddraccepted for MPJ req Adding the following warning ... WARNONONCEmsk-pm.addaddraccepted == 0 ... before decrementing the addaddraccepted counter helped to find a bug when running the "remove single...

CVE-2024-45009

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement addaddraccepted for MPJ req Adding the following warning ... WARNONONCEmsk-pm.addaddraccepted == 0 ... before decrementing the addaddraccepted counter helped to find a bug when running the "remove single...

CVE-2024-45009

CVE-2024-45009 is a Linux kernel vulnerability in mptcp: pm where the add_addr_accepted counter could be decremented incorrectly during RM_ADDR/subflow removal, potentially leading to a UaF scenario if subflows are not fully established. The available connected advisories indicate concrete fixes ...

CVE-2024-45009

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement addaddraccepted for MPJ req Adding the following warning ... WARNONONCEmsk-pm.addaddraccepted == 0 ... before decrementing the addaddraccepted counter helped to find a bug when running the "remove single...