CVE-2022-49669

Summary

CVE-2022-49669 is a vulnerability affecting the Linux kernel's Multipath TCP (MPTCP) implementation. The issue arises when the listener socket is closed, causing unaccepted subflows to be freed, which may leave paired MPTCP sockets in an inconsistent state. If the mptcp socket's worker runs during the cleanup process, it can access an underflowed msk->first pointer, resulting in a Use-After-Free (UaF) access. The vulnerability is addressed by explicitly traversing the listener socket accept queue at close time and performing the necessary cleanup on pending msk sockets. Proper locking is required to ensure the msk socket lock is acquired while still holding the subflow socket lock.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.