CVE-2025-21938

CVE-2025-21938 involves the Linux kernel mptcp subsystem. The race occurs when multiple parallel connection requests try to create an implicit MPTCP endpoint and none find the address in local_addr_list, causing concurrent mptcp_pm_nl_get_local_id/mptcp_pm_nl_append_new_local_addr calls to delete...