Riskcovery

CVE-2024-46711

mptcp: pm: fix ID 0 endp usage after multiple re-creations

State
Published
Severity
Not scored
Published
Sep 13, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: fix ID 0 endp usage after multiple re-creations

'local_addr_used' and 'add_addr_accepted' are decremented for addresses not related to the initial subflow (ID0), because the source and destination addresses of the initial subflows are known from the beginning: they don't count as "additional local address being used" or "ADD_ADDR being accepted".

It is then required not to increment them when the entrypoint used by the initial subflow is removed and re-added during a connection. Without this modification, this entrypoint cannot be removed and re-added more than once.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3ad14f54bd7448384458e69f0183843f683ecce8 to before c9c744666f7308a4daba520191e29d395260bcfeAffected
  • 3ad14f54bd7448384458e69f0183843f683ecce8 to before 53e2173172d26c0617b29dd83618b71664bed1fbAffected
  • 3ad14f54bd7448384458e69f0183843f683ecce8 to before 119806ae4e46cf239db8e6ad92bc2fd3daae86dcAffected
  • 3ad14f54bd7448384458e69f0183843f683ecce8 to before 9366922adc6a71378ca01f898c41be295309f044Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.109 through 6.1.*Not affected
  • 6.6.49 through 6.6.*Not affected
  • 6.10.8 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.