In the Linux kernel, the following vulnerability has been resolved:
mptcp: plug races between subflow fail and subflow creation
We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger.
The solution is similar. Use a separate flag to track the condition 'socket state prevent any additional subflow creation' protected by the fallback lock.
The socket fallback makes such flag true, and also receiving or sending an MP_FAIL option.
The field 'allow_infinite_fallback' is now always touched under the relevant lock, we can drop the ONCE annotation on write.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-modules-extraUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perf6.12Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.150-174.273Upgrade bpftool6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel6.12Upgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade kernel6.12-modules-extra-commonUpgrade kernel-modules-extra-commonUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel6.12-devel | Oct 16, 2025 | Aug 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 16, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-extra | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-kvmUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinxUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-oracle-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1030-gkeop | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Aug 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub