mptcp: reclaim forward-allocated memory on RX path errors
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.18.46, 7.1.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming. Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From a84164847b1e0a106ebc46821e5d2f9b775c9dc8 · fixed in 473f1a5ab2abc98dd9e74b95b9c23c66c47535cc; From 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 · fixed in 8277f48a06d3aa1441f6d0b6998ccc0360d30ed8; From 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 · fixed in 41b49a8b914ec7dcb03eae93fb27f3c464078644; From 6.18.35 · fixed in 6.18.46
- Linux Linux
6.19
- KernelLinux
fixed in 6.18.46; From 6.19.0 · fixed in 7.1.10