Threats tagged 'ghsa-w373-phfp-m2jq'

CVE-2024-57882 is a medium severity vulnerability in the Linux kernel's Multipath TCP (mptcp) implementation. It involves a TCP options overflow caused by incorrect length computation of MPTCP options, specifically the ADD_ADDR option being improperly handled alongside the DSS option. This flaw can lead to a kernel crash (general protection fault) due to memory corruption. The issue was reported by Syzbot and involves a null pointer dereference and page flag corruption during TCP packet processing.