CVE-2024-50085

A flaw was found in the Linux kernel's Multipath TCP (MPTCP) module. This use-after-free vulnerability, located in the mptcp_pm_nl_rm_addr_or_subflow function, occurs due to improper memory handling when removing an address or subflow. A local attacker could exploit this flaw to cause a system crash, leading to a denial of service. In some scenarios, this type of vulnerability could also potentially lead to information disclosure or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.