CVE-2026-97568

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A local attacker could cause a denial of service DoS by exploiting an uninitialized memory access during connection handling. When processing connection requests using SYN cookies, the kernel copies uninitialized subflow...

Exploit for CVE-2026-98432

CVE-2026-98432 checker: Linux TCP use-after-free CVSS 9.8 U...

CVE-2026-98438

A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. When handling connection termination DATAFIN packets without payload data while checksum negotiation is enabled, the kernel fails to properly initialize memory before computing the packet checksum. A network peer could trigger...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using locksockfast atomic context around socksettimestamp and socksettimestamping is unsafe, as both helpers can sleep. Replace locksockfast with sleepable locksock/releaseso...

CLSA-2025-1757962453 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

CLSA-2025-1742469561 kernel: Fix of 21 CVEs

net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...

CLSA-2025-1757961864 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

CLSA-2025-1742471200 kernel: Fix of 21 CVEs

net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...

CLSA-2025-1742472545 kernel: Fix of 10 CVEs

USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - HID: core: zero-initialize the report buffer CVE-2024-50302 - dm cache: fix potential out-of-bounds access on the first resume CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle large GSO sizes Following the aforementioned commit, TCP sockets and MPTCP subflows can generate egress packets exceeding 64K. This exceeds the maximum DSS data size; the length is misrepresented over the wire,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mptcp: Use the appropriate destructor for IPv6. Previously, only the destructor from the TCP request sock in IPv4 was called, even if the subflow was IPv6. It is important to use the correct destructor to avoid memory leaks with...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inetopt' for the new socket has the same value as the original one: as a...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mptcp: stricter state check in mptcpworker As reported by Christoph, the mptcp protocol can run the worker when the relevant msk socket is in an unexpected state: connect // incoming reset + fastclose // the mptcp worker is...

CVE-2026-80784

A flaw was found in the Linux kernel's Multipath TCP MPTCP component. A race condition exists during socket teardown and concurrent userspace Multipath TCP MPTCP general announce operations. This can allow a local attacker to trigger a memory leak by causing an allocation to occur after a list ha...

CVE-2026-97567

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition can occur between socket disconnection and packet retransmission timer handling, resulting in an inconsistent socket state. A local user can exploit this timing flaw during active connection teardown to cause a...

CVE-2026-97566

A flaw was found in the Linux kernel. When removing an initial endpoint in the Multipath TCP MPTCP path manager, the system fails to clear pending address announcements, leaving stale entries in memory. A local user can exploit this vulnerability by manipulating MPTCP endpoint configurations, whi...

CVE-2026-97524

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. Under specific network error and subflow reset conditions during data receive operations, the kernel can enter a recursive call loop that attempts to acquire an already-held data lock. A remote attacker communicating over an...

CVE-2026-97523

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition between the packet scheduler and socket state transitions can cause the maximum segment size to be reset to zero following a transmission failure. An attacker could exploit this flaw during connection handling ...

CVE-2026-97522

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. When an error occurs while pushing pending data across subflows, the kernel improperly updates the transmitted byte counter with a negative error code instead of only accounting for successful transmissions. This accounting...

Ubuntu 24.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-8793-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8793-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...