THREATOPS
THREAT OPSThreat News › [NVD] CVE-2024-26782 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inet_opt' for the new socket has the same value as the origin

[NVD] CVE-2024-26782 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inet_opt' for the new socket has the same value as the origin

lownvdPublished 2024-04-04

CVE-2024-26782 CVSS: 9.8 CRITICAL Published: 2024-04-04T09:15:08.020

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix double-free on socket dismantle

when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inet_opt' for the new socket has the same value as the original one: as a consequence, on program exit it's pos

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26782