CVE-2026-80586

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...

EUVD-2026-66501

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

CVE-2026-80586

CVE-2026-80586 affects the Linux kernel MPTCP (Multipath TCP) options handling. A remote peer can send a malformed DSS (Data Sequence Number) suboption with an incorrect size , followed by another DSS or MPC + Data. The first suboption is ignored, but some fields remain written , leading to incon...