NONE · 0

CVE-2023-54085

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflow_syn_recv_sock() deletes t...

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflow_syn_recv_sock() deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not cope with the above unconditionally dereferencing the subflow context.

References

FAQ

What is CVE-2023-54085?

CVE-2023-54085 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflow_syn_recv_sock() deletes t...

How severe is CVE-2023-54085?

CVSS scoring is not yet available for CVE-2023-54085. Check NVD for updates.

Is there a patch for CVE-2023-54085?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.