In the Linux kernel, the following vulnerability has been resolved:
mptcp: options: reset DSS fields in case of unexpected size
A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some fields written, which could lead to inconsistency or access uninitialized data.
Explicitly reset the fields that could have been modified in case of unexpected size.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-develUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-debuginfoUpgrade bpftool6.18Upgrade python3-perf6.18Upgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel-livepatch-6.18.48-107.148Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade kernel6.18 | Sep 30, 2026 | Aug 26, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 27, 2026 | Aug 27, 2026 |
| Redhat_linux | — | No solution exists | Aug 31, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub