Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag Instead of using an uninitialised bit when copying the info in subflow_ulp_clone(). To fix this, no need to extend the join_entry structure: backup is coming from struct mptcp_subflow_request_sock, only one bit. Do the same here by using one bit for both.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1008f2bcbc8e461c1df3aebba30ac4f616ebe570 to < c97fa2c7ada82d4cac1c6c00643238dc4c462f15affected6f01f41b6a492ddf2da7609967cfaf57e7ca48a7 to < 1668b34452009d27be3262646de748a3e48ffd51affected09176f80995105c62939728fbad5c437d61e7ff4 to < b138e7dc719f0a3949de8bb6500b8cf1604eea06affected8ed3e34c766e8264d5d2e0436f86c51604d6a8a7 to < 360d99258a6402cb8e49771460944f19f04d25b7affectedefd340bf3d7779a3a8ec954d8ec0fb8a10f24982 to < 61178d0b85b4b1b53e78b06e89d018d22d102f88affectedefd340bf3d7779a3a8ec954d8ec0fb8a10f24982 to < 00b2bd518911e0daab00f4749cce68c191ccebb4affectedefd340bf3d7779a3a8ec954d8ec0fb8a10f24982 to < 06d649f9cd03a9f8e768a658b20acf8d2c8022e0affectedefd340bf3d7779a3a8ec954d8ec0fb8a10f24982 to < b76c0e28b392620dfbaf92cdeedbf115820b44cbaffected73e2baa301ee3f62ff971e68877adeb37f98cc67affected5.10.224 to < 5.10.271affected5.15.165 to < 5.15.222affected6.1.104 to < 6.1.189affected6.6.45 to < 6.6.158affected6.10.4 to < 6.11affected
Linux Linux
Default version status: affected
6.11affected0 to < 6.11unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c97fa2c7ada82d4cac1c6c00643238dc4c462f15 ↗
- https://git.kernel.org/stable/c/1668b34452009d27be3262646de748a3e48ffd51 ↗
- https://git.kernel.org/stable/c/b138e7dc719f0a3949de8bb6500b8cf1604eea06 ↗
- https://git.kernel.org/stable/c/360d99258a6402cb8e49771460944f19f04d25b7 ↗
- https://git.kernel.org/stable/c/61178d0b85b4b1b53e78b06e89d018d22d102f88 ↗
- https://git.kernel.org/stable/c/00b2bd518911e0daab00f4749cce68c191ccebb4 ↗
- https://git.kernel.org/stable/c/06d649f9cd03a9f8e768a658b20acf8d2c8022e0 ↗
- https://git.kernel.org/stable/c/b76c0e28b392620dfbaf92cdeedbf115820b44cb ↗