CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux broker, which fails to properly release resources when processing malformed or duplicate CONNECT packets, leading to the potential for an attacker to create numerous half-open connections. This can result in excessive memory and file descriptor consumption, ultimately triggering the Linux OOM killer and causing a denial of service. Organizations utilizing this broker should prioritize patching to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server may silently drop the connection or send a CONNACK but fail to close the session or deallocate internal resources. This behavior allows an attacker to create numerous half-open connections that consume memory and file descriptors indefinitely, potentially triggering the Linux OOM killer and causing a denial of service.