CVE-2023-53490

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc1-gdc7b257ee5dd

Description The Linux kernel’s mptcp protocol was susceptible to a race condition between disconnect (or shutdown) and accept operations. This issue stemmed from an incomplete fix in a previous commit (0ad529d9fd2b) that addressed a potential divide-by-zero error in recvmsg(). The root cause was that the mptcp stream accept() function did not acquire the necessary lock, leading to a scenario where a socket could be accepted after destructive actions had been taken, resulting in a kernel NULL pointer dereference. This could lead to system instability.

Recommendations Update to a version later than 6.5.0-rc1-gdc7b257ee5dd.