CVE-2024-45010

A flaw was found in the Linux kernel's Multipath TCP (MPTCP) Path Manager. When a 'signal' endpoint is removed, the local_addr_used counter is incorrectly decremented, even though this counter is intended for 'subflow' endpoints. This miscounting can lead to an inconsistent state in the MPTCP Path Manager, potentially allowing a local attacker to cause a Denial of Service (DoS) by disrupting network connectivity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.