Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation can lead to a 'scheduling while atomic' issue. This occurs when multiple connection requests try to create an implicit MPTCP endpoint simultaneously. The requests may interfere with each other by deleting address entries that were just created, leading to a race condition. The problem is exacerbated when an endpoint's external and internal addresses differ, causing parallel subflow SYNs that trigger the race during the initial local address list entry creation.
Exploitation of this vulnerability causes a race condition that can disrupt the proper handling of MPTCP connections, potentially leading to incorrect routing or management of network traffic.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.