In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The …
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The code in mptcp_pm_nl_fullmesh() expects to change it only on 'subflow' endpoints, to recreate more or less subflows using the linked address. Unfortunately, the set_flags() hook was a bit more permissive, and allowed 'implicit' endpoints to get the 'fullmesh' flag while it is not allowed before. Th…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1bb0d1348546ad059f55c93def34e67cb2a034a6 Patch
- https://git.kernel.org/stable/c/22b0734c9401a74ed4ebd9e8ef0da33e493852eb Patch
- https://git.kernel.org/stable/c/8ac344cbd84fda75e05e1f445f7f8fb24dc175e1 Patch
- https://git.kernel.org/stable/c/9e3d61620a3cd033319553b980ff3a350adbe1bc Patch
- https://git.kernel.org/stable/c/de3b8d41d2547452c4cafb146d003fa4689fbaf2 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Timeline
- nvd_ingest NVD