Remote code execution on Linux systems with multipath TCP
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A remotely exploitable use-after-free bug in the Linux kernel's multipath TCP stack, reported by Anthropic on October 27, lets an attacker trigger a race between a retransmitted SYN response and connection setup, potentially disclosing kernel memory or enabling code execution.