CVE-2024-53122

mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

References

Notes

 carnil> Introduced in c76c6956566f ("mptcp: call tcp_cleanup_rbuf on subflows").
 carnil> Vulnerable versions: 5.10-rc1.

Bugs

Status

Branch Status
upstream released (6.12) [ce7356ae35943cc6494cc692e62d51a734062b7d]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.11-upstream-stable released (6.11.10) [aad6412c63baa39dd813e81f16a14d976b3de2e8]
6.6-upstream-stable released (6.6.63) [ff825ab2f455299c0c7287550915a8878e2a66e0]
6.1-upstream-stable released (6.1.119) [24995851d58c4a205ad0ffa7b2f21e479a9c8527]
5.10-upstream-stable needed
4.19-upstream-stable N/A "Vulnerable code not present"
sid released (6.11.10-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security released (6.1.119-1)
5.10-bullseye-security needed