mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb
Summary
GSD-2022-1001196: mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb. Affects Kernel versions >= f70cad1085d1e01d3ec73c1078405f906237feee, < 4d54181eba4b077fb74033a7186898ad4000a7a5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mptcp package is a component of the Linux Kernel ecosystem. It provides support for Multipath TCP (MPTCP), which allows for the simultaneous use of multiple network paths for a single TCP connection. MPTCP enhances performance, reliability, and resilience of TCP connections. However, a vulnerability has been discovered in the package that can lead to a crash. This vulnerability was introduced in version v5.16 of the Linux Kernel and has been fixed in version v5.17.2.
Vulnerability Detail
The vulnerability in the mptcp package is caused by the initialization of tcp_tsorted_anchor before releasing the skb (socket buffer). This can result in a crash, although the exact impact and attack plausibility have not been proven. The vulnerability was fixed in the Linux Kernel version v5.17.2 by commit 4d54181eba4b077fb74033a7186898ad4000a7a5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The mptcp package in the Linux Kernel is vulnerable to a crash due to the initialization of tcp_tsorted_anchor before releasing the skb. This vulnerability has been fixed in version v5.17.2 of the Linux Kernel. It is recommended to update to this version or later to mitigate the risk. For more information and support, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The exact impact of this vulnerability is not yet proven. However, it can lead to a crash in the mptcp package.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. It requires no signup and uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
No specific workaround has been mentioned for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel.
You can find more information about this vulnerability in the GSD-2022-1001196 JSON file available on the GitHub repository of the Cloud Security Alliance's GSD Database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1001xxx/GSD-2022-1001196.json
For further support on vulnerability remediation, you can contact info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
