CVE-2026-89554

CVE-2026-89554 affects the Linux kernel's MPTCP (Multipath TCP) implementation. When reconstructing a MP_JOIN request under SYN cookies, mptcp_token_join_cookie_init_state() fails to restore the local_id field from the saved cookie entry. Because the request-sock slab is SLAB_TYPESAFE_BY_RCU and ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-383713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-383713 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmit Syzkaller was able to trigger a DSS...