A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.110/6.6.51/6.10.10. Affected by this issue is the function sk_stop_timer_sync of the component mptcp. The manipulation leads to use after free.

This vulnerability is handled as CVE-2024-46858. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.