CVE-2024-44974 mptcp: pm: avoid possible UaF when selecting endp

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Related to mptcp Vulnerabilities Published Three new Common Vulnerabilities and Exposures (CVEs) related to MultiPath TCP (mptcp) have been published. CVE-2024-44974, CVE-2024-45009, and CVE-2024-45010 address various issues in the mptcp implementation, affecting systems utilizing this protocol. These vulnerabilities were published between September 2024 and are now documented as part of Microsoft's security updates. 5 sources 39