CVE-2024-46711
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-46711
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-46711.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-46711
- Downstream
- Related
- Published
- 2024-09-13T06:33:42Z
- Modified
- 2025-10-15T15:08:13.442515Z
- Summary
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: fix ID 0 endp usage after multiple re-creations
'localaddrused' and 'addaddraccepted' are decremented for addresses not related to the initial subflow (ID0), because the source and destination addresses of the initial subflows are known from the beginning: they don't count as "additional local address being used" or "ADD_ADDR being accepted".
It is then required not to increment them when the entrypoint used by the initial subflow is removed and re-added during a connection. Without this modification, this entrypoint cannot be removed and re-added more than once.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/119806ae4e46cf239db8e6ad92bc2fd3daae86dc
- https://git.kernel.org/stable/c/53e2173172d26c0617b29dd83618b71664bed1fb
- https://git.kernel.org/stable/c/9366922adc6a71378ca01f898c41be295309f044
- https://git.kernel.org/stable/c/c9c744666f7308a4daba520191e29d395260bcfe
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3ad14f54bd7448384458e69f0183843f683ecce8Fixedc9c744666f7308a4daba520191e29d395260bcfe
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3ad14f54bd7448384458e69f0183843f683ecce8Fixed53e2173172d26c0617b29dd83618b71664bed1fb
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3ad14f54bd7448384458e69f0183843f683ecce8Fixed119806ae4e46cf239db8e6ad92bc2fd3daae86dc
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3ad14f54bd7448384458e69f0183843f683ecce8Fixed9366922adc6a71378ca01f898c41be295309f044
Affected versions
v5.*
v5.19
v5.19-rc6
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.107
v6.1.108
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.2
v6.10.3
v6.10.4
v6.10.5
v6.10.6
v6.10.7
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
Database specific
{
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9366922adc6a71378ca01f898c41be295309f044",
"signature_type": "Line",
"target": {
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"213388227840127487424712013799768188803",
"4113378300411285993132802283825082272",
"308472595338749201567431801972856472342",
"46585121800183527332150977091469299026",
"338727509532258417309737996776991468492",
"324094878559211724111451582318612323455",
"37643427860557853648539773958171577093",
"49005736468585574899533973868774118280",
"98922763298623253789556149791855774177",
"73367918493264246178724740241128712968",
"70502177259625576186448692960279546671"
],
"threshold": 0.9
},
"id": "CVE-2024-46711-16bfb44e"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@119806ae4e46cf239db8e6ad92bc2fd3daae86dc",
"signature_type": "Line",
"target": {
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"213388227840127487424712013799768188803",
"4113378300411285993132802283825082272",
"308472595338749201567431801972856472342",
"46585121800183527332150977091469299026",
"338727509532258417309737996776991468492",
"324094878559211724111451582318612323455",
"37643427860557853648539773958171577093",
"49005736468585574899533973868774118280",
"98922763298623253789556149791855774177",
"73367918493264246178724740241128712968",
"70502177259625576186448692960279546671"
],
"threshold": 0.9
},
"id": "CVE-2024-46711-199c8bef"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@119806ae4e46cf239db8e6ad92bc2fd3daae86dc",
"signature_type": "Function",
"target": {
"function": "mptcp_pm_nl_add_addr_received",
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"length": 990.0,
"function_hash": "125721477428973794242024034765387809282"
},
"id": "CVE-2024-46711-aa4807b5"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9366922adc6a71378ca01f898c41be295309f044",
"signature_type": "Function",
"target": {
"function": "mptcp_pm_nl_add_addr_received",
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"length": 990.0,
"function_hash": "125721477428973794242024034765387809282"
},
"id": "CVE-2024-46711-acde2009"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9c744666f7308a4daba520191e29d395260bcfe",
"signature_type": "Function",
"target": {
"function": "mptcp_pm_nl_add_addr_received",
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"length": 955.0,
"function_hash": "179300004198038378089631952149422502652"
},
"id": "CVE-2024-46711-b6bca314"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@119806ae4e46cf239db8e6ad92bc2fd3daae86dc",
"signature_type": "Function",
"target": {
"function": "mptcp_pm_create_subflow_or_signal_addr",
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"length": 2350.0,
"function_hash": "326193169323656430705034368619089409325"
},
"id": "CVE-2024-46711-b9b111cd"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9c744666f7308a4daba520191e29d395260bcfe",
"signature_type": "Function",
"target": {
"function": "mptcp_pm_create_subflow_or_signal_addr",
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"length": 2358.0,
"function_hash": "94629071423486672857858446915722128077"
},
"id": "CVE-2024-46711-d71cfc60"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9c744666f7308a4daba520191e29d395260bcfe",
"signature_type": "Line",
"target": {
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"213388227840127487424712013799768188803",
"4113378300411285993132802283825082272",
"308472595338749201567431801972856472342",
"46585121800183527332150977091469299026",
"338727509532258417309737996776991468492",
"324094878559211724111451582318612323455",
"37643427860557853648539773958171577093",
"49005736468585574899533973868774118280",
"98922763298623253789556149791855774177",
"73367918493264246178724740241128712968",
"70502177259625576186448692960279546671"
],
"threshold": 0.9
},
"id": "CVE-2024-46711-d98408a5"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9366922adc6a71378ca01f898c41be295309f044",
"signature_type": "Function",
"target": {
"function": "mptcp_pm_create_subflow_or_signal_addr",
"file": "net/mptcp/pm_netlink.c"
},
"deprecated": false,
"digest": {
"length": 2350.0,
"function_hash": "326193169323656430705034368619089409325"
},
"id": "CVE-2024-46711-f3b6f44f"
}
]
}