Description
A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Linux kernel (mptcp) | Fixed in 5.19 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.18.14-1 | — |
| Debian 13 | linux | 5.18.14-1 | — |
| Debian 12 | linux | 5.18.14-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-riscv +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv +22 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.0.0-284.11.1.el9_2 | RHSA-2023:2458 |
| RHEL 9 | kernel-rt +14 | 5.14.0-284.11.1.rt14.296.el9_2 | RHSA-2023:2148 |
| RHEL 9 | perf +48 | 5.14.0-284.11.1.el9_2 | RHSA-2023:2458 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftool | 7.0.0-284.11.1.el9_2 | ALSA-2023:2458 |
| AlmaLinux 9 | kernel-rt +13 | 5.14.0-284.11.1.rt14.296.el9_2 | ALSA-2023:2148 |
| AlmaLinux 9 | perf +45 | 5.14.0-284.11.1.el9_2 | ALSA-2023:2458 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.0.0-284.11.1.el9_2 | ELSA-2023-2458 |
| Oracle Linux 9 | perf +25 | 5.14.0-284.11.1.el9_2 | ELSA-2023-2458 |
Advisories 5
- ALSA-2023:2458 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:2148 Important: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:2458 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2023:2148 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- ELSA-2023-2458 Important: kernel security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 15, 2023