4 matches found
AZL-97842 CVE-2026-80585 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...
CVE-2026-80585
This vulnerability affects the Linux kernel's MPTCP (Multipath TCP) Fast Open implementation. The function mptcp_fastopen_subflow_synack_set_params() incorrectly set the is_mptfo flag before verifying that SYN data had actually been queued on the child socket's receive queue. Data-less TFO SYNs (...
CVE-2026-80585 mptcp: fastopen: only mark MPTFO subflows with SYN data
In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child socket's receive queue is intentionally left empty...
Linux Distros Unpatched Vulnerability : CVE-2026-80585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fastopen: only mark MPTFO subflows with SYN data Passive TCP Fast Open accepts a valid-cookie SYN even when it carries no data. In that case the child...