Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mptcp: Use the appropriate destructor for IPv6. Previously, only the destructor from the TCP request sock in IPv4 was called, even if the subflow was IPv6. It is important to use the correct destructor to avoid memory leaks with...

EUVD-2022-55778

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

UBUNTU-CVE-2022-50783

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

CVE-2022-50783

CVE-2022-50783 refers to a Linux kernel issue where the MPTCP IPv6 subflow used the IPv4 TCP request sock destructor, risking memory leaks when IPv6 options are present. The root cause is the incorrect destructor selection for IPv6 traffic; the fix ensures the proper destructor is used for IPv6 s...

PT-2023-34365

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.162 Description The issue concerns the use of a proper request destructor for IPv6 in the mptcp component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-34011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.86 Description The issue is related to the mptcp component, specifically with the use of a proper request destructor for IPv6. The actual impact and attack plausibility have not yet been proven...