PT-2024-31363 · Linux+7 · Linux Kernel+7

Published

2024-08-19

·

Updated

2026-05-26

·

CVE-2024-45010

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the Linux kernel's handling of 'subflow' endpoints in the mptcp module. When a 'signal' endpoint is removed, it triggers the removal of all linked subflows via the mptcp pm nl rm addr or subflow() function with rm type == MPTCP MIB RMSUBFLOW. This incorrectly decrements the local addr used counter, which is linked to 'subflow' endpoints. The counter is now decremented only if the ID is used outside of mptcp pm nl rm addr or subflow(), only for 'subflow' endpoints, and if the ID is not 0. The marking of the ID as available and the decrement are done regardless of whether a subflow using this ID is currently available, because the subflow could have been closed before.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-691

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-12970
ALT-PU-2024-13121
ALT-PU-2024-13166
ALT-PU-2024-13260
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-49182
AZL-49263
BDU:2025-03751
CVE-2024-45010
DLA-4008-1
DSA-5782-1
INFSA-2025_6966
OESA-2024-2492
OPENSUSE-SU-2025_0847-1
OPENSUSE-SU-2025_0856-1
OPENSUSE-SU-2025_0955-1
RHSA-2025:6966
RHSA-2025_6966
SUSE-SU-2025:0784-1
SUSE-SU-2025:0847-1
SUSE-SU-2025:0856-1
SUSE-SU-2025:0955-1
SUSE-SU-2025:20190-1
SUSE-SU-2025:20192-1
SUSE-SU-2025:20260-1
SUSE-SU-2025:20270-1
SUSE-SU-2025_0847-1
SUSE-SU-2025_0856-1
SUSE-SU-2025_0955-1
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu