Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6771bfd9ee2460c13e38c0cd46a3afb5404ae716 before fde99e972b8f88cebe619241d7aa43d288ef666a; affected 6771bfd9ee2460c13e38c0cd46a3afb5404ae716 before 12c1676d598e3b8dd92a033b623b792cc2ea1ec5; affected 6771bfd9ee2460c13e38c0cd46a3afb5404ae716 before 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25; affected 6771bfd9ee2460c13e38c0cd46a3afb5404ae716 before b8be15d1ae7ea4eedd547c3b3141f592fbddcd30; affected 6771bfd9ee2460c13e38c0cd46a3afb5404ae716 before 8bfd391bde685df7289b928ce8876a3583be4bfb; affected 6771bfd9ee2460c13e38c0cd46a3afb5404ae716 before e32d262c89e2b22cb0640223f953b548617ed8a6 |
| Linux / Linux | affected 5.7; unaffected 0 before 5.7; unaffected 5.10.228 through 5.10.*; unaffected 5.15.169 through 5.15.*; unaffected 6.1.113 through 6.1.*; unaffected 6.6.57 through 6.6.*; unaffected 6.11.4 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/fde99e972b8f88cebe619241d7aa43d288ef666a
- https://git.kernel.org/stable/c/12c1676d598e3b8dd92a033b623b792cc2ea1ec5
- https://git.kernel.org/stable/c/35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25
- https://git.kernel.org/stable/c/b8be15d1ae7ea4eedd547c3b3141f592fbddcd30
- https://git.kernel.org/stable/c/8bfd391bde685df7289b928ce8876a3583be4bfb
- https://git.kernel.org/stable/c/e32d262c89e2b22cb0640223f953b548617ed8a6
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.