PT-2024-32138 · Linux+6 · Linux Kernel+6

Arınç Ünal

·

Published

2024-08-29

·

Updated

2025-09-29

·

CVE-2024-46711

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the Linux kernel's handling of the local addr used and add addr accepted variables in the context of the initial subflow (ID0) in the mptcp protocol. The problem arises when the entrypoint used by the initial subflow is removed and re-added during a connection, causing the variables to be decremented incorrectly for addresses not related to the initial subflow. This results in the entrypoint being unable to be removed and re-added more than once.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-682

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-12968
ALT-PU-2024-12970
ALT-PU-2024-13121
ALT-PU-2024-13166
ALT-PU-2024-13260
ALT-PU-2024-13979
ALT-PU-2024-14046
BDU:2025-01751
CVE-2024-46711
DLA-4008-1
DSA-5782-1
INFSA-2025_6966
OESA-2025-1097
RHSA-2025:6966
RHSA-2025_6966
SUSE-SU-2024:3553-1
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Ubuntu