Critical TCP Options Overflow Vulnerability in Linux Kernel
Summary
CVE-2024-57882: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Affects linux versions < 6.1.124-1. Fixed in 6.1.124-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is widely used in various environments, including servers, desktops, and embedded systems. This vulnerability affects the MPTCP (Multipath TCP) implementation, which enhances TCP by allowing multiple paths for data transmission, improving performance and reliability. The vulnerability arises from a flaw in the handling of TCP options, specifically related to the ADD_ADDR option, leading to potential system crashes and data corruption.
Vulnerability Detail
The vulnerability, identified as CVE-2024-57882, is caused by a bug in the MPTCP option length computation. It can lead to a general protection fault due to a non-canonical address, resulting in a null pointer dereference. This issue can cause system instability, crashes, and potential data loss. The root cause is linked to improper handling of the ADD_ADDR option in conjunction with the DSS option, which can corrupt the shinfo->nr_frags structure, leading to severe consequences during TCP packet processing.
How To Fix
Minimum fixed version
6.1.124-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable MPTCP if it is not required for their applications. This can be done by modifying the kernel parameters or configuration files, though it is recommended to apply the patch as soon as possible for long-term security.
Conclusion
CVE-2024-57882 is a critical vulnerability in the Linux kernel's MPTCP implementation that poses significant risks to system stability and data integrity. Users are strongly advised to update their systems to the latest patched version to mitigate these risks. Temporary workarounds are available, but applying the patch is the best long-term solution.
See every vulnerability recorded for linux →
FAQ
CVE-2024-57882 is a vulnerability in the Linux kernel's MPTCP implementation that can lead to system crashes due to a TCP options overflow.
This vulnerability can cause general protection faults, leading to system instability, crashes, and potential data loss during TCP packet processing.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If you cannot update your kernel right away, consider disabling MPTCP as a temporary workaround until you can apply the patch.
More information can be found in the official CVE database or by checking the Linux kernel mailing lists and security advisories.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
