In the Linux kernel, the following vulnerability has been resolved:
mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
subflow_finish_connect() uses four fields (backup, join_id, thmac, none) that may contain garbage unless OPTION_MPTCP_MPJ_SYNACK has been set in mptcp_parse_option()
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-xilinxUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-qcomUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-starfiveUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-laptop-23.10 | Jun 26, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub