Lucene search
+L

9 matches found

AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•11 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: Properly handling disconnections due to fastopen. Syzbot was able to trigger data stream corruption: WARNING: CPU: 0 PID: 9846 at net/mptcp/protocol.c:1024 mptcpcleanuna+0xddb/0xff0 net/mptcp/protocol.c:1024 Modules...

5.5CVSS6.5AI score0.0022EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/27 12:11 a.m.•15 views

SUSE CVE-2026-80585

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

5.3CVSS6AI score0.00313EPSS
SaveExploits0References10
NVD
NVD
•added 2026/08/26 3:17 p.m.•16 views

CVE-2026-80585

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

9.4CVSS0.00313EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2026/08/26 3:17 p.m.•18 views

AZL-97842 CVE-2026-80585 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

9.4CVSS6AI score0.00313EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/26 2:37 p.m.•49 views

CVE-2026-80585 mptcp: fastopen: only mark MPTFO subflows with SYN data

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

9.4CVSS0.00313EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/08/26 2:37 p.m.•16 views

CVE-2026-80585 mptcp: fastopen: only mark MPTFO subflows with SYN data

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...

9.4CVSS6AI score0.00313EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•28 views

PT-2026-82201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP implementation regarding TCP Fast Open TFO. The function mptcp fastopen subflow synack set params incorrectly sets the is mptfo flag before...

9.4CVSS5.8AI score0.00313EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-5248

Malicious code in bioql PyPI...

6.6AI score0.0022EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/04/03 2:55 p.m.•19 views

CVE-2024-26708 mptcp: really cope with fastopen race

In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the subflow status can change again before the...

5.5CVSS6.1AI score0.00172EPSS
SaveExploits0References6
Rows per page
Query Builder