Threats tagged 'ghsa-3r7x-52q9-w4pw'

A NULL pointer dereference vulnerability in the Linux kernel's MPTCP implementation was fixed. The issue occurred in the function mptcp_can_accept_new_subflow when subflow_req->msk was NULL due to concurrent processing of SYN-ACK packets, potentially causing kernel panic. The patch moves the subflow_req->msk assignment under a conditional to prevent this dereference.