In the Linux kernel, the following vulnerability has been resolved:
mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().
mptcp_active_enable() is called from subflow_finish_connect(), which is icsk->icsk_af_ops->sk_rx_dst_set() and it's not always under RCU.
Using sk_dst_get(sk)->dev could trigger UAF.
Let's use __sk_dst_get() and dst_dev_rcu().
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-livepatch-6.12.55-74.119Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfo | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Feb 11, 2026 | Nov 12, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 4, 2026 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade rtlaUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade libperf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-s390xUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modulesUpgrade kernelUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modules-core | Feb 16, 2026 | Feb 15, 2026 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-generic-6.17Upgrade linux-image-gcpUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-generic-64k-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1011-oemUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-oem-6.17Upgrade linux-image-gcp-6.17 | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub