CVE-2024-53122: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg() spooling data received on an already established subflow would unconditionally call tcp_cleanup_rbuf() on all the current subflows, potentially hitting a divide by zero error on the newly created ones. Explicitly check that the subflow is in a suitable state before invoking tcp_cleanup_rbuf().

Affected products

• Linux Linux Kernel: from 5.10, before 6.1.119 (fixed in 6.1.119); from 6.2, before 6.6.63 (fixed in 6.6.63); from 6.7, before 6.11.10 (fixed in 6.11.10); version 6.12 only

Published 2024-12-02. Last modified 2026-08-04.