1306 matches found
CVE-2019-7489
This repository does not have a README...
multi_path
multipath - exploit for p0 issue 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for AFINE...
kernel: mptcp: options: reset DSS fields in case of unexpected size
A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...
kernel: mptcp: options: reset DSS fields in case of unexpected size
A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. A remote attacker could send specially crafted Data Sink Selection DSS options with an unexpected size. This could lead to data inconsistency or the access of uninitialized data, potentially resulting in information...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel: writeback: fix race between...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143050)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143050 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect subflowfinishconnect uses four fields...
Linux Distros Unpatched Vulnerability : CVE-2026-98438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, a...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46137)
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: fix potential data-race This mptcppmaddtimer helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bhlocksock. If the socket is in use,...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46168)
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using locksockfast atomic context around socksettimestamp and socksettimestamping is unsafe, as both helpers can sleep. Replace locksockfast with sleepable locksock/releaseso...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53183)
In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the window field in the TCP header refers to the MPTCP-level rcvnxt and it's right edge should not move backward. Such constraint is enforced at DSS option generation...
CVE-2026-98438
A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. When handling connection termination DATAFIN packets without payload data while checksum negotiation is enabled, the kernel fails to properly initialize memory before computing the packet checksum. A network peer could trigger...
UBUNTU-CVE-2026-98438
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
CVE-2026-98438
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
SUSE CVE-2026-98438
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
DEBIAN-CVE-2026-98438
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
CVE-2026-98438
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
CVE-2026-98438 mptcp: options: fix uninit-value in mptcp_write_data_fin
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
CVE-2026-98438
The Linux kernel contains a vulnerability in the mptcp options where an uninitialized value was used in mptcp_write_data_fin. Specifically, when sending a DATA_FIN without data, the system fails to properly initialize the csum field and other fields in the ext_copy structure, as these are no long...
CVE-2026-98438 mptcp: options: fix uninit-value in mptcp_write_data_fin
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...
EUVD-2026-103677
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcpwritedatafin When sending a DATAFIN without data, and because the DATAFIN occupies 1 octet of the connection-level sequence space 1, it is then required to add a DSS mapping with specific...