Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-54085

mptcp: fix NULL pointer dereference on fastopen early fallback

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflow_syn_recv_sock() deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not cope with the above unconditionally dereferencing the subflow context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 36b122baf6a8bd46b4a591f12f4ed17b22257408 to < 95135835519b0ab931c39908b2c99e9fb3c9068baffected
  • 36b122baf6a8bd46b4a591f12f4ed17b22257408 to < c0ff6f6da66a7791a32c0234388b1bdc00244917affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.2.12 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References