CVE-2025-21938

CVE-2025-21938 refers to a Linux kernel vulnerability in MPTCP where, when multiple connection requests create an implicit MPTCP endpoint in parallel, concurrent mptcp_pm_nl_get_local_id calls may delete the address entry created by a previous caller. The root cause is risky deletes via synchroni...