Threats tagged 'ghsa-58qx-pwx2-gqm9'

CVE-2024-53123 is a medium-severity vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation. It involves a division by zero error triggered during a racing disconnect scenario, causing a kernel crash (Oops). The flaw arises from improper handling of socket state when the underlying socket disconnects and the receive MSS (maximum segment size) is zero. This issue has been resolved by catching the error and avoiding further operations on the affected socket.