CVE-2024-40931

mptcp: ensure snd_una is properly initialized on connect

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mptcp: ensure snd_una is properly initialized on connect

This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt

is properly initialized on connect"). It turns out that syzkaller can

trigger the retransmit after fallback and before processing any other

incoming packet - so that snd_una is still left uninitialized.

Address the issue explicitly initializing snd_una together with snd_nxt

and write_seq.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.1th percentile
Published
2024-07-12T12:25Z
EPSS history
Timeline
  • 12 JUL 12:25Z
    mptcp: ensure snd_una is properly initialized on connect
    cvelistv5