CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
In the Linux kernel, the following vulnerability has been resolved:
mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect()
subflowfinishconnect() uses four fields (backup, joinid, thmac, none) that may contain garbage unless OPTIONMPTCPMPJSYNACK has been set in mptcpparseoption()
Other sources
In the Linux kernel, the following vulnerability has been resolved:
mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect()
The Linux kernel CVE team has assigned CVE-2024-35840 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051756-CVE-2024-35840-99fa@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.148 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.75 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.14 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.2 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.76-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.6.15-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35840?
CVE-2024-35840 has been classified as a medium severity vulnerability due to its potential impact on data integrity.
How do I fix CVE-2024-35840?
To fix CVE-2024-35840, update the Linux kernel to version 5.15.148, 6.1.75, 6.6.14, 6.7.2, 6.8 or applicable versions specified for the affected distributions.
Which systems are affected by CVE-2024-35840?
CVE-2024-35840 affects specific versions of the Red Hat kernel and Debian Linux packages.
What are the symptoms of CVE-2024-35840 exploitation?
Exploitation of CVE-2024-35840 may result in unexpected behavior during MultiPath TCP connections due to uninitialized fields.
Is CVE-2024-35840 related to MultiPath TCP?
Yes, CVE-2024-35840 is specifically related to vulnerabilities in the handling of MultiPath TCP options in the Linux kernel.