CVE-2023-54176

A vulnerability was identified in the Linux kernel’s implementation of the Multipath TCP protocol handler. Under certain sequences of socket operations (e.g., connecting, resetting/fast-closing, and re-listening), the MPTCP worker could be invoked while the associated master socket is in an unexpected or closed state. This incorrect state handling can cause a divide-error crash during TCP window selection, leading to system instability and potential denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.