In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50185 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS     corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning     in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the     error, dumping related MIBs and performing fallback and/or reset according to the subflow type.
    (CVE-2024-50185)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
212746	CBL Mariner 2.0 Security Update: kernel (CVE-2024-50185)	Nessus	MarinerOS Local Security Checks	medium
211393	Photon OS 4.0: Linux PHSA-2024-4.0-0711	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2024-50185

medium

Tenable Plugins

medium

high