Race Condition in Linux Kernel's MPTCP Implementation

CVE-2023-53490

What is CVE-2023-53490?

A race condition vulnerability in the MPTCP protocol of the Linux kernel has been identified, which can lead to a NULL pointer dereference. The flaw arises from a timing issue between the disconnect and accept functions, potentially allowing an attacker to exploit the situation when accept() is called, creating instability in the system. It is critical for users to apply patches to mitigate the risk associated with this vulnerability.

References