In the Linux kernel, the following vulnerability has been resolved:
mptcp: handle consistently DSS corruption
Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.
[
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"282212508946451036863344839967446077431",
"94186945686122728671263681584539520893",
"157191227810011277147327843619298257586",
"333259397606838601116744675545058071309"
]
},
"id": "CVE-2024-50185-07ada397",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46329021793765385532217342799092347228",
"71323238123821148967760908205467078134",
"233522515611128206335766057304975754918",
"247416444169208029922592317178580131248",
"218697494894794677148229009867231406",
"22940223618432830452501321015043643713",
"261154139454519859759119813067564920105",
"230301571254717477333468237630138947253",
"9387988477050883433846602366754031832",
"298856262501684366543584703484081452290"
]
},
"id": "CVE-2024-50185-088a9db7",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46329021793765385532217342799092347228",
"71323238123821148967760908205467078134",
"233522515611128206335766057304975754918",
"247416444169208029922592317178580131248",
"218697494894794677148229009867231406",
"22940223618432830452501321015043643713",
"261154139454519859759119813067564920105",
"230301571254717477333468237630138947253",
"9387988477050883433846602366754031832",
"298856262501684366543584703484081452290"
]
},
"id": "CVE-2024-50185-0d46f7ff",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c",
"function": "__mptcp_move_skbs_from_subflow"
},
"digest": {
"function_hash": "324211273797197706925416158956896412882",
"length": 1443.0
},
"id": "CVE-2024-50185-0d70b2e2",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"180624654670296855373377663245561763947",
"164459618466950698079680791516991464950",
"273840302629225567717254201113148585617",
"94965745632489246860314632295611791319",
"199418803355669969742915605340702573156"
]
},
"id": "CVE-2024-50185-21abc947",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46329021793765385532217342799092347228",
"71323238123821148967760908205467078134",
"233522515611128206335766057304975754918",
"247416444169208029922592317178580131248",
"218697494894794677148229009867231406",
"22940223618432830452501321015043643713",
"261154139454519859759119813067564920105",
"230301571254717477333468237630138947253",
"9387988477050883433846602366754031832",
"298856262501684366543584703484081452290"
]
},
"id": "CVE-2024-50185-250f8e54",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c",
"function": "__mptcp_move_skbs_from_subflow"
},
"digest": {
"function_hash": "324211273797197706925416158956896412882",
"length": 1443.0
},
"id": "CVE-2024-50185-25aa4039",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"282212508946451036863344839967446077431",
"297576701425972804493885006824138703792",
"211502438809447341200142126720717266213",
"44147453422754436216068391658257169911"
]
},
"id": "CVE-2024-50185-278efe89",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46329021793765385532217342799092347228",
"71323238123821148967760908205467078134",
"233522515611128206335766057304975754918",
"247416444169208029922592317178580131248",
"218697494894794677148229009867231406",
"22940223618432830452501321015043643713",
"261154139454519859759119813067564920105",
"230301571254717477333468237630138947253",
"9387988477050883433846602366754031832",
"298856262501684366543584703484081452290"
]
},
"id": "CVE-2024-50185-3ab44761",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c",
"function": "skb_is_fully_mapped"
},
"digest": {
"function_hash": "265691631228266286093174831696882394933",
"length": 308.0
},
"id": "CVE-2024-50185-3f9ed1fc",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"180624654670296855373377663245561763947",
"164459618466950698079680791516991464950",
"273840302629225567717254201113148585617",
"94965745632489246860314632295611791319"
]
},
"id": "CVE-2024-50185-52b2e428",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c",
"function": "skb_is_fully_mapped"
},
"digest": {
"function_hash": "265691631228266286093174831696882394933",
"length": 308.0
},
"id": "CVE-2024-50185-60abd840",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"26822803059055263361662209277958328059",
"16271213151136252692441206371146829397",
"6501324316678111011740621935081065159",
"19510235431768948772136250962316479366"
]
},
"id": "CVE-2024-50185-74219c27",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"180624654670296855373377663245561763947",
"164459618466950698079680791516991464950",
"273840302629225567717254201113148585617",
"94965745632489246860314632295611791319",
"199418803355669969742915605340702573156"
]
},
"id": "CVE-2024-50185-7dfd25fb",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c",
"function": "skb_is_fully_mapped"
},
"digest": {
"function_hash": "265691631228266286093174831696882394933",
"length": 308.0
},
"id": "CVE-2024-50185-ab95ec88",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"26822803059055263361662209277958328059",
"16271213151136252692441206371146829397",
"6501324316678111011740621935081065159",
"19510235431768948772136250962316479366"
]
},
"id": "CVE-2024-50185-abc62ad4",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c",
"function": "__mptcp_move_skbs_from_subflow"
},
"digest": {
"function_hash": "28230164578170687927469201065006942344",
"length": 1500.0
},
"id": "CVE-2024-50185-c337645d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"88468633983533178783064336986985017421",
"37069589569441918283934372017073511803",
"265567721749174623408493265472495968209",
"19510235431768948772136250962316479366"
]
},
"id": "CVE-2024-50185-c8d04c62",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/protocol.c",
"function": "__mptcp_move_skbs_from_subflow"
},
"digest": {
"function_hash": "28230164578170687927469201065006942344",
"length": 1500.0
},
"id": "CVE-2024-50185-ce387da4",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"26822803059055263361662209277958328059",
"337933320777870138244507018323235894996",
"54692296831859955955617159991227950136",
"292240378091465401041442926899693907059"
]
},
"id": "CVE-2024-50185-d58a7305",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/subflow.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"180624654670296855373377663245561763947",
"164459618466950698079680791516991464950",
"273840302629225567717254201113148585617",
"94965745632489246860314632295611791319",
"199418803355669969742915605340702573156"
]
},
"id": "CVE-2024-50185-d92e3b70",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"174505509982443185086183199266271161389",
"184857144421276703869970896374942754576",
"297987476129730364426724695900448045613",
"333259397606838601116744675545058071309"
]
},
"id": "CVE-2024-50185-e6bd4d8f",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/mptcp/mib.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"282212508946451036863344839967446077431",
"94186945686122728671263681584539520893",
"157191227810011277147327843619298257586",
"333259397606838601116744675545058071309"
]
},
"id": "CVE-2024-50185-f2fe43f9",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25",
"signature_version": "v1"
}
]