Threats tagged 'ghsa-fc34-92xq-43pm'

A high-severity vulnerability in the Linux kernel's Multipath TCP (mptcp) implementation causes a soft lockup in the mptcp_recvmsg() function when receiving data with MSG_PEEK and MSG_WAITALL flags. The issue arises because the socket buffer (skb) is not removed from the receive queue, causing the kernel to enter an infinite loop waiting for data. This flaw was reported by syzbot and fixed by adding a mechanism to track the last peeked skb, allowing proper waiting behavior and preventing the lockup.