01 Record

CVE-2024-50085

mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow

CriticalPUBLISHEDCNA: Linux

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.48% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 41.1% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-29 00:50Z2 YR AGO

Last updated

2026-08-05 11:41Z2 MO AGO

Reserved

2024-10-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

8a35edb14feb0195bae5826a851ee9a0013e22d8c6739534965992d2ac1071e8

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux35b31f5549ede4070566b949781e83495906b43d to < 35301636439138b821f1f6169bd00d348ebd388a, 85b866e4c4e63a1d7afb58f1e24273caad03d0b7 to < da3343bc0839b180fd9af9c27fa456d8231409f9, d20bf2c96d7ffd171299b32f562f70e5bf5dc608 to < 7b2e478abab0b3a33515433a6af563aebba773c1, 1c1f721375989579e46741f59523e39ec9b2a9bd to < a8c36ea4ef9a350816f6556c5c5b63810f84b538, 1c1f721375989579e46741f59523e39ec9b2a9bd to < 7decd1f5904a489d3ccdcf131972f94645681689, 2060f1efab370b496c4903b840844ecaff324c3c, 5.15.167 to < 5.15.169, 6.1.107 to < 6.1.114, 6.6.48 to < 6.6.58, 6.10.7 to < 6.11, 6.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/35301636439138b821f1f6169bd00d348ebd388a
git.kernel.orghttps://git.kernel.org/stable/c/da3343bc0839b180fd9af9c27fa456d8231409f9
git.kernel.orghttps://git.kernel.org/stable/c/7b2e478abab0b3a33515433a6af563aebba773c1
git.kernel.orghttps://git.kernel.org/stable/c/a8c36ea4ef9a350816f6556c5c5b63810f84b538
git.kernel.orghttps://git.kernel.org/stable/c/7decd1f5904a489d3ccdcf131972f94645681689
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.115-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.11.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.11.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.