CVE-2024-35894

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-12873-g2c43c33bfd23

Description The issue is caused by the Linux kernel's BPF allowing access to mptcp-level proto ops from a tcp subflow scope. This can lead to a denial of service. The root cause of the issue is that bpf allows accessing mptcp-level proto ops from a tcp subflow scope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.