CVE-2026-97522 mptcp: fix bad accounting in __mptcp_subflow_push_pending()

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on...

CVE-2026-97522 mptcp: fix bad accounting in __mptcp_subflow_push_pending()

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on...

CVE-2026-97568: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag Instead of using an uninitialised bit when copying the info in subflowulpclone. To fix this, no need to extend the joinentry structure: backup is coming from struct...

CVE-2026-97567: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect and rtx Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous timer stop operation...

Linux Distros Unpatched Vulnerability : CVE-2026-97524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky...

PT-2026-98463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mptcp scheduler during subflow sockets state changes. This occurs when data transmission on a selected socket fails, potentially leading to a subsequent...

PT-2026-98464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mptcp receive path where, under specific error conditions, the system can recursively call the mptcp data ready function via a state change, leading to an attempt ...

Linux Distros Unpatched Vulnerability : CVE-2026-97566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the ...

Linux Distros Unpatched Vulnerability : CVE-2026-97568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: syncookies: remember the request backup flag Instead of using an uninitialised bit when copying the info in subflowulpclone. To fix this, no need to exte...

CVE-2026-97524: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky error conditions, and then try to hold the data lock again. Break the...

CVE-2026-97523: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

CVE-2026-97522: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on...

PT-2026-98506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The in-kernel MPTCP path manager contains an asymmetry between removal paths that can leave a stale ADD ADDR announcement entry active when removing the id 0 endpoint. This occurs becaus...

PT-2026-98462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP implementation where incorrect accounting occurs within the mptcp subflow push pending function. If the subflow push pending function returns a...

Linux Distros Unpatched Vulnerability : CVE-2026-97567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: prevent race between disconnect and rtx Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous...

Linux Distros Unpatched Vulnerability : CVE-2026-97522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push...

PT-2026-98508

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mptcp syncookies implementation where an uninitialised bit is used when copying information within the subflow ulp clone function. Recommendations At the moment,...

CVE-2026-97522

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on...

CVE-2026-97523

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...

CVE-2026-97524

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp receive path can recursively call mptcpdataready via state change under unlucky error conditions, and then try to hold the data lock again. Break the...