Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the ‘fullmesh’ flag. The code in mptcppmnlfullmesh expects to change it only on ‘subflow’ endpoints, to recreate more or less...

PT-2026-98506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The in-kernel MPTCP path manager contains an asymmetry between removal paths that can leave a stale ADD ADDR announcement entry active when removing the id 0 endpoint. This occurs becaus...

CVE-2026-80784

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcppmdestroy empties msk-pm.annolist and msk-pm.userspacepmlocaladdrlist under msk-pm.lock during socket teardown, dropping the lock between the two. A concurrent...

EUVD-2026-27811

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating this warning: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable net/mptcp/pmkernel.c:10...