Fixed
Created: May 18, 2024
Updated: May 22, 2024
Resolved Date: May 19, 2024
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:
mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
subflow_finish_connect() uses four fields (backup, join_id, thmac, none)
that may contain garbage unless OPTION_MPTCP_MPJ_SYNACK has been set
in mptcp_parse_option()
CREATE(Triage):(User=admin) CVE-2024-35840 (https://nvd.nist.gov/vuln/detail/CVE-2024-35840)
