Linux Kernel MPTCP Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's Multipath TCP (MPTCP) implementation. This issue arises during token lookup, following a refactor of the passive socket initialization. The vulnerability allows for a read of freed memory, which can be exploited by a user-space task, potentially leading to undefined behavior or memory corruption.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, allowing for memory corruption or undefined behavior in the kernel.

Remediation

The vulnerability has been addressed in the official Linux kernel repository. Users should upgrade to the latest stable version of the Linux kernel to mitigate this vulnerability.