In the Linux kernel, the following vulnerability has been resolved:
mptcp: handle consistently DSS corruption
Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.
[ { "signature_type": "Line", "id": "CVE-2024-50185-07ada397", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb", "signature_version": "v1", "target": { "file": "net/mptcp/mib.h" }, "digest": { "threshold": 0.9, "line_hashes": [ "282212508946451036863344839967446077431", "94186945686122728671263681584539520893", "157191227810011277147327843619298257586", "333259397606838601116744675545058071309" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-088a9db7", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb", "signature_version": "v1", "target": { "file": "net/mptcp/protocol.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "46329021793765385532217342799092347228", "71323238123821148967760908205467078134", "233522515611128206335766057304975754918", "247416444169208029922592317178580131248", "218697494894794677148229009867231406", "22940223618432830452501321015043643713", "261154139454519859759119813067564920105", "230301571254717477333468237630138947253", "9387988477050883433846602366754031832", "298856262501684366543584703484081452290" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-0d46f7ff", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6", "signature_version": "v1", "target": { "file": "net/mptcp/protocol.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "46329021793765385532217342799092347228", "71323238123821148967760908205467078134", "233522515611128206335766057304975754918", "247416444169208029922592317178580131248", "218697494894794677148229009867231406", "22940223618432830452501321015043643713", "261154139454519859759119813067564920105", "230301571254717477333468237630138947253", "9387988477050883433846602366754031832", "298856262501684366543584703484081452290" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-0d70b2e2", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25", "signature_version": "v1", "target": { "function": "__mptcp_move_skbs_from_subflow", "file": "net/mptcp/protocol.c" }, "digest": { "function_hash": "324211273797197706925416158956896412882", "length": 1443.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-0dae0b02", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8be15d1ae7ea4eedd547c3b3141f592fbddcd30", "signature_version": "v1", "target": { "file": "net/mptcp/subflow.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "180624654670296855373377663245561763947", "164459618466950698079680791516991464950", "273840302629225567717254201113148585617", "94965745632489246860314632295611791319", "199418803355669969742915605340702573156" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-1be45938", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8be15d1ae7ea4eedd547c3b3141f592fbddcd30", "signature_version": "v1", "target": { "file": "net/mptcp/protocol.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "46329021793765385532217342799092347228", "71323238123821148967760908205467078134", "233522515611128206335766057304975754918", "247416444169208029922592317178580131248", "218697494894794677148229009867231406", "22940223618432830452501321015043643713", "261154139454519859759119813067564920105", "230301571254717477333468237630138947253", "9387988477050883433846602366754031832", "298856262501684366543584703484081452290" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-21abc947", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25", "signature_version": "v1", "target": { "file": "net/mptcp/subflow.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "180624654670296855373377663245561763947", "164459618466950698079680791516991464950", "273840302629225567717254201113148585617", "94965745632489246860314632295611791319", "199418803355669969742915605340702573156" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-250f8e54", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25", "signature_version": "v1", "target": { "file": "net/mptcp/protocol.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "46329021793765385532217342799092347228", "71323238123821148967760908205467078134", "233522515611128206335766057304975754918", "247416444169208029922592317178580131248", "218697494894794677148229009867231406", "22940223618432830452501321015043643713", "261154139454519859759119813067564920105", "230301571254717477333468237630138947253", "9387988477050883433846602366754031832", "298856262501684366543584703484081452290" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-25aa4039", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5", "signature_version": "v1", "target": { "function": "__mptcp_move_skbs_from_subflow", "file": "net/mptcp/protocol.c" }, "digest": { "function_hash": "324211273797197706925416158956896412882", "length": 1443.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-270b8dea", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fde99e972b8f88cebe619241d7aa43d288ef666a", "signature_version": "v1", "target": { "file": "net/mptcp/protocol.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "216775959337973479558490244674874404471", "95759361369521434068326194838513359532", "233522515611128206335766057304975754918", "247416444169208029922592317178580131248", "218697494894794677148229009867231406", "22940223618432830452501321015043643713", "261154139454519859759119813067564920105", "230301571254717477333468237630138947253", "9387988477050883433846602366754031832", "298856262501684366543584703484081452290" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-278efe89", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5", "signature_version": "v1", "target": { "file": "net/mptcp/mib.h" }, "digest": { "threshold": 0.9, "line_hashes": [ "282212508946451036863344839967446077431", "297576701425972804493885006824138703792", "211502438809447341200142126720717266213", "44147453422754436216068391658257169911" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-39a36dee", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8be15d1ae7ea4eedd547c3b3141f592fbddcd30", "signature_version": "v1", "target": { "file": "net/mptcp/mib.h" }, "digest": { "threshold": 0.9, "line_hashes": [ "282212508946451036863344839967446077431", "94186945686122728671263681584539520893", "157191227810011277147327843619298257586", "333259397606838601116744675545058071309" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-3ab44761", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5", "signature_version": "v1", "target": { "file": "net/mptcp/protocol.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "46329021793765385532217342799092347228", "71323238123821148967760908205467078134", "233522515611128206335766057304975754918", "247416444169208029922592317178580131248", "218697494894794677148229009867231406", "22940223618432830452501321015043643713", "261154139454519859759119813067564920105", "230301571254717477333468237630138947253", "9387988477050883433846602366754031832", "298856262501684366543584703484081452290" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-3f9ed1fc", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6", "signature_version": "v1", "target": { "function": "skb_is_fully_mapped", "file": "net/mptcp/subflow.c" }, "digest": { "function_hash": "265691631228266286093174831696882394933", "length": 308.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-52b2e428", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5", "signature_version": "v1", "target": { "file": "net/mptcp/subflow.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "180624654670296855373377663245561763947", "164459618466950698079680791516991464950", "273840302629225567717254201113148585617", "94965745632489246860314632295611791319" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-5c300e83", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8be15d1ae7ea4eedd547c3b3141f592fbddcd30", "signature_version": "v1", "target": { "file": "net/mptcp/mib.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "26822803059055263361662209277958328059", "16271213151136252692441206371146829397", "6501324316678111011740621935081065159", "19510235431768948772136250962316479366" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-60abd840", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb", "signature_version": "v1", "target": { "function": "skb_is_fully_mapped", "file": "net/mptcp/subflow.c" }, "digest": { "function_hash": "265691631228266286093174831696882394933", "length": 308.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-6a1bac1b", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fde99e972b8f88cebe619241d7aa43d288ef666a", "signature_version": "v1", "target": { "file": "net/mptcp/mib.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "26822803059055263361662209277958328059", "337933320777870138244507018323235894996", "64850591568226894089145050280731868235", "23122800402704324134450228703883247943" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-70935bce", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fde99e972b8f88cebe619241d7aa43d288ef666a", "signature_version": "v1", "target": { "file": "net/mptcp/subflow.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "180624654670296855373377663245561763947", "164459618466950698079680791516991464950", "273840302629225567717254201113148585617", "94965745632489246860314632295611791319" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-74219c27", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25", "signature_version": "v1", "target": { "file": "net/mptcp/mib.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "26822803059055263361662209277958328059", "16271213151136252692441206371146829397", "6501324316678111011740621935081065159", "19510235431768948772136250962316479366" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-7dfd25fb", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb", "signature_version": "v1", "target": { "file": "net/mptcp/subflow.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "180624654670296855373377663245561763947", "164459618466950698079680791516991464950", "273840302629225567717254201113148585617", "94965745632489246860314632295611791319", "199418803355669969742915605340702573156" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-8988386c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fde99e972b8f88cebe619241d7aa43d288ef666a", "signature_version": "v1", "target": { "function": "__mptcp_move_skbs_from_subflow", "file": "net/mptcp/protocol.c" }, "digest": { "function_hash": "336203012852006486050731052984840997278", "length": 1328.0 }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-a20cd793", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8be15d1ae7ea4eedd547c3b3141f592fbddcd30", "signature_version": "v1", "target": { "function": "skb_is_fully_mapped", "file": "net/mptcp/subflow.c" }, "digest": { "function_hash": "265691631228266286093174831696882394933", "length": 308.0 }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-ab95ec88", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25", "signature_version": "v1", "target": { "function": "skb_is_fully_mapped", "file": "net/mptcp/subflow.c" }, "digest": { "function_hash": "265691631228266286093174831696882394933", "length": 308.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-abc62ad4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb", "signature_version": "v1", "target": { "file": "net/mptcp/mib.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "26822803059055263361662209277958328059", "16271213151136252692441206371146829397", "6501324316678111011740621935081065159", "19510235431768948772136250962316479366" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-c337645d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6", "signature_version": "v1", "target": { "function": "__mptcp_move_skbs_from_subflow", "file": "net/mptcp/protocol.c" }, "digest": { "function_hash": "28230164578170687927469201065006942344", "length": 1500.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-c8d04c62", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6", "signature_version": "v1", "target": { "file": "net/mptcp/mib.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "88468633983533178783064336986985017421", "37069589569441918283934372017073511803", "265567721749174623408493265472495968209", "19510235431768948772136250962316479366" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-ce387da4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8bfd391bde685df7289b928ce8876a3583be4bfb", "signature_version": "v1", "target": { "function": "__mptcp_move_skbs_from_subflow", "file": "net/mptcp/protocol.c" }, "digest": { "function_hash": "28230164578170687927469201065006942344", "length": 1500.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-d2dcd41c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fde99e972b8f88cebe619241d7aa43d288ef666a", "signature_version": "v1", "target": { "file": "net/mptcp/mib.h" }, "digest": { "threshold": 0.9, "line_hashes": [ "282212508946451036863344839967446077431", "297576701425972804493885006824138703792", "30418667449920878456071523811389698666", "251861611759838306861645872439743868460" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-d58a7305", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12c1676d598e3b8dd92a033b623b792cc2ea1ec5", "signature_version": "v1", "target": { "file": "net/mptcp/mib.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "26822803059055263361662209277958328059", "337933320777870138244507018323235894996", "54692296831859955955617159991227950136", "292240378091465401041442926899693907059" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-d92e3b70", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6", "signature_version": "v1", "target": { "file": "net/mptcp/subflow.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "180624654670296855373377663245561763947", "164459618466950698079680791516991464950", "273840302629225567717254201113148585617", "94965745632489246860314632295611791319", "199418803355669969742915605340702573156" ] }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-e6bd4d8f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e32d262c89e2b22cb0640223f953b548617ed8a6", "signature_version": "v1", "target": { "file": "net/mptcp/mib.h" }, "digest": { "threshold": 0.9, "line_hashes": [ "174505509982443185086183199266271161389", "184857144421276703869970896374942754576", "297987476129730364426724695900448045613", "333259397606838601116744675545058071309" ] }, "deprecated": false }, { "signature_type": "Function", "id": "CVE-2024-50185-ef6d7a0d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8be15d1ae7ea4eedd547c3b3141f592fbddcd30", "signature_version": "v1", "target": { "function": "__mptcp_move_skbs_from_subflow", "file": "net/mptcp/protocol.c" }, "digest": { "function_hash": "324211273797197706925416158956896412882", "length": 1443.0 }, "deprecated": false }, { "signature_type": "Line", "id": "CVE-2024-50185-f2fe43f9", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25", "signature_version": "v1", "target": { "file": "net/mptcp/mib.h" }, "digest": { "threshold": 0.9, "line_hashes": [ "282212508946451036863344839967446077431", "94186945686122728671263681584539520893", "157191227810011277147327843619298257586", "333259397606838601116744675545058071309" ] }, "deprecated": false } ]