Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Arınç Ünal

#50350of 53,633
4.7Total CVSS
Vulnerabilities · 1
PT-2024-32138
4.7
2024-08-29
Linux · Linux Kernel · CVE-2024-46711
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the Linux kernel's handling of the `local addr used` and `add addr accepted` variables in the context of the initial subflow (ID0) in the mptcp protocol. The problem arises when the entrypoint used by the initial subflow is removed and re-added during a connection, causing the variables to be decremented incorrectly for addresses not related to the initial subflow. This results in the entrypoint being unable to be removed and re-added more than once. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.