CVE-2024-26708: mptcp: really cope with fastopen race
In the Linux kernel, the following vulnerability has been resolved:
mptcp: really cope with fastopen race
Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller.
In my first attempt to close such race, I missed the fact that the subflow status can change again before the subflowstatechange callback is invoked.
Address the issue additionally copying with all the states directly reachable from TCPFINWAIT1.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
mptcp: really cope with fastopen race
The Linux kernel CVE team has assigned CVE-2024-26708 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040341-CVE-2024-26708-c98a@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26708?
CVE-2024-26708 has a medium severity rating due to the potential for exploitation during the fastopen race condition in the Linux kernel.
How do I fix CVE-2024-26708?
To fix CVE-2024-26708, update your Linux kernel to versions 6.6.18, 6.7.6, 6.8, or for Debian based systems, versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which Linux kernel versions are affected by CVE-2024-26708?
CVE-2024-26708 affects Linux kernel versions before 6.6.18, 6.7.6, and 6.8, along with several specific Debian kernel versions.
Is CVE-2024-26708 related to network security?
Yes, CVE-2024-26708 relates to network security as it involves a race condition in the MultiPath TCP (MPTCP) implementation in the Linux kernel.
Can CVE-2024-26708 be exploited remotely?
CVE-2024-26708 could potentially be exploited remotely through malicious network interactions exploiting the MPTCP fastopen functionality.