REDHAT-BUG-2414465: Medium severity Linux Foundation Linux Kernel vulnerability
In the Linux kernel, the following vulnerability has been resolved:
mptcp: Use skdstget() and dstdevrcu() in mptcpactiveenable().
mptcpactiveenable() is called from subflowfinishconnect(), which is icsk->icskafops->skrxdstset() and it's not always under RCU.
Using skdstget(sk)->dev could trigger UAF.
Let's use skdstget() and dstdevrcu().
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2414465?
REDHAT-BUG-2414465 has been classified with a severity level that indicates a significant security risk for affected systems.
How do I fix REDHAT-BUG-2414465?
To resolve REDHAT-BUG-2414465, update your Linux Kernel to the latest patched version that addresses this vulnerability.
Which systems are affected by REDHAT-BUG-2414465?
REDHAT-BUG-2414465 affects systems running specific versions of the Linux Kernel.
Is there a workaround for REDHAT-BUG-2414465?
There are no known effective workarounds for REDHAT-BUG-2414465; the recommended action is to apply the necessary updates.
What type of vulnerability is REDHAT-BUG-2414465?
REDHAT-BUG-2414465 is a vulnerability associated with the improper handling of active connections in the mptcp component of the Linux Kernel.