A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.110/6.6.51/6.10.10. Affected by this issue is the function
sk_stop_timer_sync
of the component mptcp. The manipulation leads to use after free.
This vulnerability is handled as CVE-2024-46858. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to upgrade the affected component.