DEBIAN-CVE-2025-21707

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...

CVE-2025-21707

CVE-2025-21707 affects the Linux kernel MPTCP implementation. The issue stems from how MPTCP maintains received suboption status as a bitmask and per-suboption info. Zeroing the status bitmask on parse isn’t sufficient; some per-suboption bitfields aren’t cleared/initialized for certain parsed su...