MPTCP Subflow Closure Vulnerability in Linux Kernel: CVE-2024-45009
Summary
CVE-2024-45009: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only decrement add_addr_accepted for MPJ req Adding the following warning ... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including networking, file systems, and process management. The kernel's Multipath TCP (MPTCP) implementation allows for the use of multiple paths for a single TCP connection, enhancing performance and reliability. However, vulnerabilities in this complex system can lead to significant security risks.
Vulnerability Detail
CVE-2024-45009 is a vulnerability in the Linux kernel's MPTCP implementation, specifically related to the handling of subflow closures. The issue arises when a 'subflow' endpoint is removed, triggering a RM_ADDR message. The vulnerability occurs because the counter for accepted addresses (add_addr_accepted) is decremented incorrectly, even when the attached subflows have not been established. This flaw can lead to unexpected behavior during the removal of subflows, potentially compromising the integrity of the MPTCP connections.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid removing subflow endpoints until the kernel is updated. This can be done by ensuring that all subflows are properly managed and not removed during active sessions.
Conclusion
CVE-2024-45009 represents a significant vulnerability in the Linux kernel's MPTCP implementation, specifically concerning the management of subflow closures. Users are advised to update their systems promptly to mitigate potential risks associated with this issue.
See every vulnerability recorded for linux →
FAQ
CVE-2024-45009 is a vulnerability in the Linux kernel's MPTCP implementation that affects the handling of subflow closures.
This vulnerability can lead to incorrect behavior in MPTCP connections, potentially compromising the stability and security of network communications.
You should update your Linux kernel to the latest version that includes the fix for CVE-2024-45009.
Yes, you can use Vulert's playground to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for CVE-2024-45009 is 5.5, indicating a moderate level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
