CVE-2024-53122

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65

Description The issue concerns a vulnerability in the Linux kernel related to the mptcp rcv space adjust function, where additional active subflows created by the in-kernel path manager are included in the subflow list before starting the 3whs. A racing recvmsg() call that queues data received on an already established subflow could unconditionally call tcp cleanup rbuf() on all current subflows, potentially causing a divide by zero error on newly created ones. To address this, the kernel now explicitly checks that the subflow is in a suitable state before invoking tcp cleanup rbuf().

Recommendations For Linux kernel versions prior to 6.6.65, update to version 6.6.65 or later to resolve the issue. As a temporary workaround, consider restricting the use of the mptcp rcv space adjust function until a patch is available. Avoid using the recvmsg() function on already established subflows in vulnerable versions to minimize the risk of exploitation.