4 matches found
mptcp: consolidate suboption status
...
SUSE CVE-2025-21707
In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...
DEBIAN-CVE-2025-21707
In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsi...
CVE-2025-21707
CVE-2025-21707 details (Linux kernel MPTCP issue). The vulnerability arises in MPTCP suboption status handling, where zeroing a bitmask is insufficient and certain per-suboption bitfields may fail to be cleared/initialized. Syzkaller reported KMSAN uninitialized value paths in __mptcp_expand_seq ...