CVE-2025-71126

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A remote attacker could exploit this vulnerability when the packet scheduler attempts to reinject packets after receiving an MPFAIL message but before the infinite map has been fully transmitted. This timing issue can lead...