CVE-2026-89554

Linux kernel MPTCP is affected by an uninitialized memory bug in the SYN cookie MP_JOIN reconstruction path. When rebuilding a request socket for a 4th-ACK MP_JOIN handled under SYN cookies, mptcp_token_join_cookie_init_state() restores several fields but fails to restore local_id. Since the requ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-383713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-383713 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmit Syzkaller was able to trigger a DSS...