ROS-20261014-73-0008

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

ROS-20261009-73-0383

The vulnerability of the net/mptcp/pmkernel.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux MPTCP pm_add_timer Heap Buffer Overflow DoS

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

ROS-20260929-73-0171

The vulnerability of the net/mptcp/subflow.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0196

The vulnerability of the mptcpretrans function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and...

ROS-20260928-73-0064

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

ROS-20260928-73-0063

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260924-73-0062

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

CVE-2026-43252: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating this warning: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable net/mptcp/pmkernel.c:10...

Linux MPTCP Protocol Heap Buffer Overflow DoS

The vulnerability of the mptcpDestroyCommon and mptcpDestroy functions in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk and mptcpworker functions in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

MPTCP Protocol CVE

The vulnerabilities of the functions mptcpsendmsgfrag and mptcpsubflowgetsend in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP implementation are related to insufficient resource locking. Exploiting these vulnerabilities could allow an attacker to compromise the...

Linux mptcp_sendmsg_frag Heap Buffer Overflow Info Disclosure

The vulnerability of the mptcpsendmsgfrag function in the net/mptcp/protocol.c module of the Linux kernel is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Linux Kernel MPTCP Buffer Overflow DoS

The vulnerability of the mptcpupdateinfinitemap function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...

PT-2025-54971

Уязвимость функции mptcp retrans модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с возникновением взаимной блокировки. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

PT-2025-51520

Уязвимость функции mptcp schedule work модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса «Ситуация гонки». Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отка...

Linux Component DoS

The vulnerability in the net/mptcp/pmnetlink.c component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38491: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...

Linux kernel MPTCP Subflow Clean Heap Buffer Overflow DoS

The vulnerability of the mptcpsubflowqueueclean function in the net/mptcp/subflow.c module of the MPTCP protocol implementation in the Linux operating system is related to improper cleaning when handling exceptions. Exploiting this vulnerability can allow a attacker to cause service failures...