8.2

CVE-2024-50185: linux

CVSS: 8.2v3.1HighModified
AliasesUBUNTU-CVE-2024-50185DEBIAN-CVE-2024-50185
Published 08-11-2024Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2024-50185 is a high (CVSS 8.2) vulnerability in linux. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.7% of scored vulnerabilities.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.2/10
010
High · v3.1 (CVE.org)
EPSS score
0.56%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 38 · Related 38
DLA-4008-1DLA-4075-1OPENSUSE-SU-2024:14500-1OPENSUSE-SU-2025:14705-1SUSE-SU-2025:0784-1SUSE-SU-2025:0847-1

Timeline

  1. 08-11-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path. Use DEBUG_NET assertions, to avoid the splat on some builds and handle consistently the error, dumping related MIBs and performing fallback and/or reset according to the subflow type.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.56%

Chance of exploitation in the next 30 days

Percentile

46%

Versus all other CVEs

30-day change

0.00 pp

From 0.56% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu122 products
  • linux< 5.15.0-133.144 | < 6.8.0-56.58
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1078.85 | < 6.8.0-1025.27
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < fde99e972b8f88cebe619241d7aa43d288ef666a | ≥ 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < 12c1676d598e3b8dd92a033b623b792cc2ea1ec5 | ≥ 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25 | ≥ 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < b8be15d1ae7ea4eedd547c3b3141f592fbddcd30 | ≥ 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < 8bfd391bde685df7289b928ce8876a3583be4bfb | ≥ 6771bfd9ee2460c13e38c0cd46a3afb5404ae716, < e32d262c89e2b22cb0640223f953b548617ed8a6 | 5.7
  • linux_kernel≥ 5.7, < 5.10.228 | ≥ 5.11, < 5.15.169 | ≥ 5.16, < 6.1.113 | ≥ 6.2, < 6.6.57 | ≥ 6.7, < 6.11.4 | 6.12:rc1 | 6.12:rc2
Debian1 product
  • linux< 6.1.115-1 | < 6.11.4-1

3 vendors · 125 products

References

41 links
Show all 41 references