Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6771bfd9ee2460c13e38c0cd46a3afb5404ae716 to < fde99e972b8f88cebe619241d7aa43d288ef666aaffected6771bfd9ee2460c13e38c0cd46a3afb5404ae716 to < 12c1676d598e3b8dd92a033b623b792cc2ea1ec5affected6771bfd9ee2460c13e38c0cd46a3afb5404ae716 to < 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25affected6771bfd9ee2460c13e38c0cd46a3afb5404ae716 to < b8be15d1ae7ea4eedd547c3b3141f592fbddcd30affected6771bfd9ee2460c13e38c0cd46a3afb5404ae716 to < 8bfd391bde685df7289b928ce8876a3583be4bfbaffected6771bfd9ee2460c13e38c0cd46a3afb5404ae716 to < e32d262c89e2b22cb0640223f953b548617ed8a6affected
Linux Linux
Default version status: affected
5.7affected0 to < 5.7unaffected5.10.228 to ≤ 5.10.*unaffected5.15.169 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.57 to ≤ 6.6.*unaffected6.11.4 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/fde99e972b8f88cebe619241d7aa43d288ef666a ↗
- https://git.kernel.org/stable/c/12c1676d598e3b8dd92a033b623b792cc2ea1ec5 ↗
- https://git.kernel.org/stable/c/35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25 ↗
- https://git.kernel.org/stable/c/b8be15d1ae7ea4eedd547c3b3141f592fbddcd30 ↗
- https://git.kernel.org/stable/c/8bfd391bde685df7289b928ce8876a3583be4bfb ↗
- https://git.kernel.org/stable/c/e32d262c89e2b22cb0640223f953b548617ed8a6 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗