CVE-2024-26708

A vulnerability was found in the subflow_simultaneous_connect() function in the mptcp component in the Linux kernel, where not all possible subflow states are evaluated, leading to a potential race condition. This issue could lead to undefined network behavior.

This vulnerability is rated as moderate because a race condition could be triggered and this could result in undefined network behavior. However, this undefined behavior would most likely only cause issues for a specific TCP connection/subflow.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.