ROS-20260929-73-0171

The vulnerability of the net/mptcp/subflow.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0196

The vulnerability of the mptcpretrans function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and...

ROS-20260928-73-0064

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

CVE-2026-43252: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating this warning: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable net/mptcp/pmkernel.c:10...

The vulnerabilities of the functions mptcpDestroyCommon() and mptcpDestroy() in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP protocol implementation allow a attacker to cause a service failure.

The vulnerability of the mptcpDestroyCommon and mptcpDestroy functions in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions __mptcp_close_ssk() and mptcp_worker() in the net/mptcp/protocol.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mptcpclosessk and mptcpworker functions in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the __mptcp_close_ssk() function in the net/mptcp/protocol.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerabilities of the functions mptcp_sendmsg_frag() and mptcp_subflow_get_send() in the module net/mptcp/protocol.c, which are part of the MPTCP protocol implementation in Linux kernel, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions mptcpsendmsgfrag and mptcpsubflowgetsend in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP implementation are related to insufficient resource locking. Exploiting these vulnerabilities could allow an attacker to compromise the...

The vulnerability of the mptcp_sendmsg_frag() function in the net/mptcp/protocol.c module of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the mptcpsendmsgfrag function in the net/mptcp/protocol.c module of the Linux kernel is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to gain access to protected information...

The vulnerability of the mptcp_update_infinite_map() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel, which allows a attacker to cause a service failure.

The vulnerability of the mptcpupdateinfinitemap function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...

PT-2025-51520

Уязвимость функции mptcp schedule work модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса «Ситуация гонки». Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отка...

The vulnerability in the `net/mptcp/pm_netlink.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/mptcp/pmnetlink.c component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38491: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...

The vulnerability of the mptcp_subflow_queue_clean() function in the net/mptcp/subflow.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the mptcpsubflowqueueclean function in the net/mptcp/subflow.c module of the MPTCP protocol implementation in the Linux operating system is related to improper cleaning when handling exceptions. Exploiting this vulnerability can allow a attacker to cause service failures...

CVE-2025-21707: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...

CVE-2022-49018

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BUG: sleeping function called from invalid context at net/mptcp/protocol.c:2877 inatomic: 1, irqsdisabled: 0, nonblock: 0, pid: 155, name:...

CVE-2022-49018

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BUG: sleeping function called from invalid context at net/mptcp/protocol.c:2877 inatomic: 1, irqsdisabled: 0, nonblock: 0, pid: 155, name:...

CVE-2022-48906: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATAFIN timeout when number of retransmits is large Syzkaller with UBSAN uncovered a scenario where a large number of DATAFIN retransmits caused a shift-out-of-bounds in the DATAFIN timeout calculation:...

CVE-2021-47370

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure tx skbs always have the MPTCP ext Due to signed/unsigned comparison, the expression: info-sizegoal - skb-len 0 evaluates to true when the size goal is smaller than the skb size. That results in lack of tx cache...

CVE-2023-52778: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: deal with large GSO size After the blamed commit below, the TCP sockets and the MPTCP subflows can build egress packets larger than 64K. That exceeds the maximum DSS data size, the length being misrepresent on the wire and...