PT-2025-40197 · Linux+2 · Linux Kernel+2
Published
2023-08-03
·
Updated
2025-11-19
·
CVE-2023-53490
CVSS v2.0
5.7
Medium
| Vector | AV:L/AC:H/Au:S/C:P/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.0-rc1-gdc7b257ee5dd
Description
The Linux kernel’s mptcp protocol was susceptible to a race condition between disconnect (or shutdown) and accept operations. This issue stemmed from an incomplete fix in a previous commit (0ad529d9fd2b) that addressed a potential divide-by-zero error in recvmsg(). The root cause was that the mptcp stream accept() function did not acquire the necessary lock, leading to a scenario where a socket could be accepted after destructive actions had been taken, resulting in a kernel NULL pointer dereference. This could lead to system instability.
Recommendations
Update to a version later than 6.5.0-rc1-gdc7b257ee5dd.
Exploit
Fix
Divide By Zero
Race Condition
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse