CVE-2022-4128

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service...

PT-2022-33416 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.3 Description: The issue is related to the mptcp protocol, where data is not properly handled on closed subflows. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2025-25997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the MPTCP protocol. When the mptcp socket creation fails due to a CGROUP INET SOCK CREATE eBPF program, the MPTCP protocol leaks...