Linux Distros Unpatched Vulnerability : CVE-2024-46711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'localaddrused' and...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock CVE-2024-40972 In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msicapabilityinit CVE-2024-41096 In the Linux kernel, the...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-779)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-779 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure timer ID search-loop limit is valid CVE-2023-53728 In the Linux kernel, the following vulnerability has...

CVE-2024-46711 affecting package kernel for versions less than 6.6.51.1-5

CVE-2024-46711 affecting package kernel for versions less than 6.6.51.1-5. An upgraded version of the package is available that resolves this issue...

CVE-2024-46711

CVE-2024-46711 affects the Linux kernel MPTCP path-management code. The issue is described as a fix for the ID 0 endpoint usage after multiple subflow re-creations, where local_addr_used/add_addr_accepted counters for initial subflows could be incorrectly decremented for unrelated addresses, prev...

CVE-2024-46711

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'localaddrused' and 'addaddraccepted' are decremented for addresses not related to the initial subflow ID0, because the source and destination addresses of the initial...