The vulnerability of the mptcp_schedule_work() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

The vulnerability of the proc_blackhole_detect_timeout() function in the net/mptcp/ctrl.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the procblackholedetecttimeout function in the net/mptcp/ctrl.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mptcp_sendmsg_frag() function in the net/mptcp/protocol.c module of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the mptcpsendmsgfrag function in the net/mptcp/protocol.c module of the Linux kernel is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to gain access to protected information...

The vulnerability of the mptcp_pernet_set_defaults() function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the mptcppernetsetdefaults function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the mptcp_update_infinite_map() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel, which allows a attacker to cause a service failure.

The vulnerability of the mptcpupdateinfinitemap function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...

PT-2025-54971

Уязвимость функции mptcp retrans модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

CVE-2025-40258

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, then gets a refcount on sk-skrefcnt if the work was scheduled. This...

AZL-71380 CVE-2025-40258 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, then gets a refcount on sk-skrefcnt if the work was scheduled. This...

UBUNTU-CVE-2025-40258

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, then gets a refcount on sk-skrefcnt if the work was scheduled. This...

CVE-2025-40258

CVE-2025-40258 is a Linux kernel use-after-free caused by a race in mptcp_schedule_work(). The issue occurs when mptcp_schedule_work() schedules a task and then takes a reference to sk->sk_refcnt; if mptcp_worker() runs first, the refcount may be released prematurely. The fixed pattern shown i...

CVE-2025-40258: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, then gets a refcount on sk-skrefcnt if the work was scheduled. This...

CVE-2025-40257: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix a race in mptcppmdeladdtimer mptcppmdeladdtimer can call skstoptimersyncsk, &entry-addtimer while another might have free entry already, as reported by syzbot. Add RCU protection to fix this issue. Also change confusin...

Linux Distros Unpatched Vulnerability : CVE-2025-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix a race in mptcppmdeladdtimer mptcppmdeladdtimer can call skstoptimersyncsk, &entry-addtimer while another might have free entry already, as reported ...

SUSE SLES15 Security Update : kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2025:4261-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4261-1 advisory. This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2025:4283-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4283-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: -...

Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882. CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm...

SUSE-SU-2025:4302-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882. - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister...

SUSE-SU-2025:21092-1 Security update for kernel-livepatch-MICRO-6-0_Update_3

This update for kernel-livepatch-MICRO-6-0Update3 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882 - CVE-2024-53141: netfilter: ipset: add missing range check in bitmapipuadt bsc1245778 - CVE-2025-38500: xfrm: interface: fix use-after-free...

SUSE-SU-2025:4283-1 Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmapipuadt bsc1245778. - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow...