CVE-2024-50185

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: handle consistently DSS corruption

Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < fde99e972b8f88cebe619241d7aa43d288ef666a; >= 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < 12c1676d598e3b8dd92a033b623b792cc2ea1ec5; >= 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25; >= 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < b8be15d1ae7ea4eedd547c3b3141f592fbddcd30; >= 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < 8bfd391bde685df7289b928ce8876a3583be4bfb; >= 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < e32d262c89e2b22cb0640223f953b548617ed8a6
LinuxLinux5.7

References

Timeline

Published
Nov 8, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-501867.8In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf->create fails We have reCVE-2024-501875.5In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Stop the active perfmon before being destroyed Upon closing tCVE-2024-501885.5In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When confCVE-2024-501895.5In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() Using theCVE-2024-50197.5In WhatsUp Gold versions released before 2023.1.3,  an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas.Wug.Controllers.SesCVE-2024-501905.5In the Linux kernel, the following vulnerability has been resolved: ice: fix memleak in ice_init_tx_topology() Fix leak of the FW blob (DDCVE-2024-501915.5In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SB_RDONLY after filesystem errors When the filesystem CVE-2024-501924.7In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reportCVE-2024-501937.1In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after register restore in NMI return CCVE-2024-501945.5In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Fix uprobes for big-endian kernels The arm64 uprobes coCVE-2024-501955.5In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pc_clock_settime() As AndCVE-2024-501965.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based interrupts The current
CVE-2024-50185: Medium severity, CVSS 5.5 | Vulnix