Race Condition Vulnerability in Linux Kernel's MPTCP Implementation
Summary
CVE-2022-49669: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race on unaccepted mptcp sockets When the listener socket owning the relevant request is closed, it frees the unaccepted subflows and that ca... Affects linux versions < 5.18.14-1. Fixed in 5.18.14-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential functionalities such as process management, memory management, and device control. The kernel supports various networking protocols, including Multipath TCP (MPTCP), which enhances TCP by allowing multiple paths for data transmission. This vulnerability arises from a race condition in the MPTCP implementation, where improper handling of socket closures can lead to security issues.
Vulnerability Detail
In the Linux kernel, a race condition exists in the MPTCP implementation when a listener socket is closed. This closure leads to the freeing of unaccepted subflows, which can subsequently cause the deletion of paired MPTCP sockets. If the mptcp socket's worker accesses the 'first' field of the msk (MPTCP socket) during this time, it results in a Use-after-Free (UaF) access. This vulnerability can potentially allow an attacker to exploit the system, leading to unauthorized access or system instability.
How To Fix
Minimum fixed version
5.18.14-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is advisable to apply the patch as soon as it is available to mitigate any risks.
Conclusion
The CVE-2022-49669 vulnerability in the Linux kernel's MPTCP implementation poses significant risks due to a race condition that can lead to unauthorized access. It is essential for users to update their systems to the patched version to ensure protection against this vulnerability.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a race condition in the MPTCP implementation of the Linux kernel, which can lead to a Use-after-Free access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
Exploitation of this vulnerability can lead to unauthorized access, system crashes, or instability in network communications.
Yes, a patch is available in version 5.18.14-1 of the Linux package. Users should update to this version to mitigate the vulnerability.
While there are no specific workarounds, it is crucial to monitor the situation and apply the patch as soon as possible to minimize risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
