Oracle Linux 9 : NetworkManager (ELSA-2026-58572)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58572 advisory. 1.54.3-5.0.1 - Introduce always-ignore-carrier setting Orabug: 39663315 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracl...

ROS-20260821-73-0005

The vulnerability of the recvmsg function in the mptcp component of the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `net/mptcp/pm_kernel.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/mptcp/pmkernel.c component of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-68169

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

SUSE CVE-2026-68170

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

The vulnerabilities of Linux operating system’s kernel mptcp components, which allow a hacker to cause a service failure

The vulnerability of Linux operating system’s mptcp kernel components is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by...

CVE-2026-68170

A flaw was found in the Linux kernel's Multipath TCP MPTCP feature. A timing issue, or race condition, can occur when a subflow is being closed, leading to a situation where the system attempts to use memory that has already been freed. This 'use-after-free' vulnerability arises because concurren...

CVE-2026-68169

A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. A race condition in the mptcppmuserspacegetlocalid function allows a memory address entry to be freed while still being referenced. A local attacker could exploit this use-after-free vulnerability, potentially leading to a syst...

AZL-94859 CVE-2026-68169 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

CVE-2026-68170

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

UBUNTU-CVE-2026-68169

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

UBUNTU-CVE-2026-68170

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

CVE-2026-68169

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

CVE-2026-68170 mptcp: fix stale skb->sk reference on subflow close

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

CVE-2026-68169

The CVE-2026-68169 entry documents a race in Linux kernel mptcp_pm_userspace_get_local_id() where an address entry is looked up under a spinlock but its id is read after the lock is released, allowing a concurrent delete to free the entry and cause a use-after-free. Concrete details show the issu...

CVE-2026-68169 mptcp: pm: userspace: fix use-after-free in get_local_id

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in getlocalid In mptcppmuserspacegetlocalid, the address entry is looked up under spinlock, but its id is read after dropping the lock. A concurrent deletion can free the entry between the...

CVE-2026-68170: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb-sk reference on subflow close The backlog list is updated by mptcpdataready under mptcpdatalock. The cleanup of backlog references to a closing subflow, however, was performed in mptcpclosessk, before...

PT-2026-69570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Multipath TCP MPTCP implementation. The problem occurs during the closure of a subflow when the cleanup of backlog references is performed in the mpt...

PT-2026-69569

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the mptcp pm userspace get local id function. The problem occurs because an address entry is looked up while holding a spinlock, but the entry's ID i...