CVE-2024-26708

2024-04-0300:00:00

ubuntu.com

linux kernel

cve-2024-26708

mptcp

fastopen

pm-trigger subflow

tcp_fin_wait1

vulnerability

AI Score

6.6

Confidence

High

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: mptcp:
really cope with fastopen race Fastopen and PM-trigger subflow shutdown can
race, as reported by syzkaller. In my first attempt to close such race, I
missed the fact that the subflow status can change again before the
subflow_state_change callback is invoked. Address the issue additionally
copying with all the states directly reachable from TCP_FIN_WAIT1.

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchlinux< 6.5.0-44.44UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< 6.5.0-1023.23~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< 6.5.0-1024.25~22.04.1UNKNOWN
ubuntu23.10noarchlinux-gcp< 6.5.0-1024.26UNKNOWN
ubuntu22.04noarchlinux-gcp-6.5< 6.5.0-1024.26~22.04.1UNKNOWN
ubuntu22.04noarchlinux-hwe-6.5< 6.5.0-44.44~22.04.1UNKNOWN
ubuntu22.04noarchlinux-lowlatency-hwe-6.5< 6.5.0-44.44.1~22.04.1UNKNOWN
ubuntu22.04noarchlinux-nvidia-6.5< 6.5.0-1023.24UNKNOWN
ubuntu22.04noarchlinux-oem-6.5< anyUNKNOWN
ubuntu22.04noarchlinux-oracle-6.5< 6.5.0-1026.26~22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	23.10	noarch	linux	< 6.5.0-44.44	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< 6.5.0-1023.23~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< 6.5.0-1024.25~22.04.1	UNKNOWN
ubuntu	23.10	noarch	linux-gcp	< 6.5.0-1024.26	UNKNOWN
ubuntu	22.04	noarch	linux-gcp-6.5	< 6.5.0-1024.26~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-hwe-6.5	< 6.5.0-44.44~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-lowlatency-hwe-6.5	< 6.5.0-44.44.1~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-nvidia-6.5	< 6.5.0-1023.24	UNKNOWN
ubuntu	22.04	noarch	linux-oem-6.5	< any	UNKNOWN
ubuntu	22.04	noarch	linux-oracle-6.5	< 6.5.0-1026.26~22.04.1	UNKNOWN