CVE-2024-50185

A flaw was found in the kernel. A remote attacker can send malformed Data-path Service Sublayer (DSS) options within MultiPath TCP (MPTCP) connections. This can lead to a denial of service, causing the system to log debugging information and potentially reset or fallback subflows, disrupting network communication.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that the MPTCP kernel module is not loaded. This can be achieved by blacklisting the mptcp module.

1. Create a file /etc/modprobe.d/blacklist-mptcp.conf with the following content: blacklist mptcp

2. Regenerate the initramfs:

   • For Red Hat Enterprise Linux 8 and 9: dracut -f -v
   • For Red Hat Enterprise Linux 7: mkinitrd -f -v /boot/initramfs-$(uname -r).img $(uname -r)

3. Reboot the system for the changes to take effect.

This mitigation may impact applications that rely on MPTCP functionality.