In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: only decrement add_addr_accepted for MPJ req
Adding the following warning ...
WARN_ON_ONCE(msk->pm.add_addr_accepted == 0)
... before decrementing the add_addr_accepted counter helped to find a bug when running the "remove single subflow" subtest from the mptcp_join.sh selftest.
Removing a 'subflow' endpoint will first trigger a RM_ADDR, then the subflow closure. Before this patch, and upon the reception of the RM_ADDR, the other peer will then try to decrement this add_addr_accepted. That's not correct because the attached subflows have not been created upon the reception of an ADD_ADDR.
A way to solve that is to decrement the counter only if the attached subflow was an MP_JOIN to a remote id that was not 0, and initiated by the host receiving the RM_ADDR.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.167-112.165Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo | Oct 16, 2025 | Sep 11, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 11, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-lg | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae | Nov 12, 2024 | Sep 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub