Linux MPTCP Protocol Heap Buffer Overflow DoS

The vulnerability of the mptcpDestroyCommon and mptcpDestroy functions in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk and mptcpworker functions in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

MPTCP Protocol CVE

The vulnerabilities of the functions mptcpsendmsgfrag and mptcpsubflowgetsend in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP implementation are related to insufficient resource locking. Exploiting these vulnerabilities could allow an attacker to compromise the...

Linux mptcp_sendmsg_frag Heap Buffer Overflow Info Disclosure

The vulnerability of the mptcpsendmsgfrag function in the net/mptcp/protocol.c module of the Linux kernel is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Linux Kernel MPTCP Buffer Overflow DoS

The vulnerability of the mptcpupdateinfinitemap function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...

CVE-2022-49018

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BUG: sleeping function called from invalid context at net/mptcp/protocol.c:2877 inatomic: 1, irqsdisabled: 0, nonblock: 0, pid: 155, name:...