cveboard RSS feed

CVE-2024-44974

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

mptcp: pm: avoid possible UaF when selecting endp

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp select_local_address() and select_signal_address() both select an endpoint entry from the list inside an RCU protected section, but return a reference to it, to be read later on. If the entry is dereferenced after the RCU unlock, reading info could cause a Use-after-Free. A simple solution is to copy the required info while inside the RCU protected section to avoid any risk of UaF later. The address ID might need to be modified later to handle the ID0 case later, so a copy seems OK to deal with.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
01cacb00b35cb62b139f07d5f84bcf0eeda8eff6affectedgitddee5b4b6a1cc03c1e9921cf34382e094c2009f1UnavailableNone listed
01cacb00b35cb62b139f07d5f84bcf0eeda8eff6affectedgitf2c865e9e3ca44fc06b5f73b29a954775e4dbb38UnavailableNone listed
01cacb00b35cb62b139f07d5f84bcf0eeda8eff6affectedgit2b4f46f9503633dade75cb796dd1949d0e6581a1UnavailableNone listed
01cacb00b35cb62b139f07d5f84bcf0eeda8eff6affectedgit9a9afbbc3fbfca4975eea4aa5b18556db5a0c0b8UnavailableNone listed
01cacb00b35cb62b139f07d5f84bcf0eeda8eff6affectedgit0201d65d9806d287a00e0ba96f0321835631f63fUnavailableNone listed
01cacb00b35cb62b139f07d5f84bcf0eeda8eff6affectedgit48e50dcbcbaaf713d82bf2da5c16aeced94ad07dUnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.7affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver5.7UnavailableNone listed
5.10.226unaffectedsemverUnavailable5.10.*None listed
5.15.167unaffectedsemverUnavailable5.15.*None listed
6.1.109unaffectedsemverUnavailable6.1.*None listed
6.6.48unaffectedsemverUnavailable6.6.*None listed
6.10.7unaffectedsemverUnavailable6.10.*None listed
6.11unaffectedoriginal_commit_for_fixUnavailable*None listed