In the Linux kernel, the following vulnerability has been resolved:
mptcp: ensure context reset on disconnect()
After the blamed commit below, if the MPC subflow is already in TCP_CLOSE status or has fallback to TCP at mptcp_disconnect() time, mptcp_do_fastclose() skips setting the `send_fastclose flag` and the later __mptcp_close_ssk() does not reset anymore the related subflow context.
Any later connection will be created with both the `request_mptcp` flag and the msk-level fallback status off (it is unconditionally cleared at MPTCP disconnect time), leading to a warning in subflow_data_ready():
WARNING: CPU: 26 PID: 8996 at net/mptcp/subflow.c:1519 subflow_data_ready (net/mptcp/subflow.c:1519 (discriminator 13)) Modules linked in: CPU: 26 UID: 0 PID: 8996 Comm: syz.22.39 Not tainted 6.18.0-rc7-05427-g11fc074f6c36 #1 PREEMPT(voluntary) Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 RIP: 0010:subflow_data_ready (net/mptcp/subflow.c:1519 (discriminator 13)) Code: 90 0f 0b 90 90 e9 04 fe ff ff e8 b7 1e f5 fe 89 ee bf 07 00 00 00 e8 db 19 f5 fe 83 fd 07 0f 84 35 ff ff ff e8 9d 1e f5 fe 90 <0f> 0b 90 e9 27 ff ff ff e8 8f 1e f5 fe 4c 89 e7 48 89 de e8 14 09 RSP: 0018:ffffc9002646fb30 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff88813b218000 RCX: ffffffff825c8435 RDX: ffff8881300b3580 RSI: ffffffff825c8443 RDI: 0000000000000005 RBP: 000000000000000b R08: ffffffff825c8435 R09: 000000000000000b R10: 0000000000000005 R11: 0000000000000007 R12: ffff888131ac0000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f88330af6c0(0000) GS:ffff888a93dd2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f88330aefe8 CR3: 000000010ff59000 CR4: 0000000000350ef0 Call Trace: <TASK> tcp_data_ready (net/ipv4/tcp_input.c:5356) tcp_data_queue (net/ipv4/tcp_input.c:5445) tcp_rcv_state_process (net/ipv4/tcp_input.c:7165) tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1955) __release_sock (include/net/sock.h:1158 (discriminator 6) net/core/sock.c:3180 (discriminator 6)) release_sock (net/core/sock.c:3737) mptcp_sendmsg (net/mptcp/protocol.c:1763 net/mptcp/protocol.c:1857) inet_sendmsg (net/ipv4/af_inet.c:853 (discriminator 7)) __sys_sendto (net/socket.c:727 (discriminator 15) net/socket.c:742 (discriminator 15) net/socket.c:2244 (discriminator 15)) __x64_sys_sendto (net/socket.c:2247) do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) RIP: 0033:0x7f883326702d
Address the issue setting an explicit `fastclosing` flag at fastclose time, and checking such flag after mptcp_do_fastclose().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 16, 2026 | Mar 16, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1052-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.17.0-1017-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-6.17.0-29-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.17.0-1015-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-gke-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.17.0-1018-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-awsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1026-nvidia-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-110-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.17Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-oem-24.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-6.17.0-1015-awsUpgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-aws-6.17Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.17Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-110-fipsUpgrade linux-image-6.8.0-1054-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.17.0-29-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1023-oemUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-hwe-24.04-edgeUpgrade linux-image-6.17.0-1018-gcp-64kUpgrade linux-image-6.17.0-1017-aws-64kUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.17.0-1026-nvidiaUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-6.17.0-1015-azureUpgrade linux-image-6.17.0-1014-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-6.17Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-6.17.0-1017-raspiUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-6.17.0-1014-oracle-64kUpgrade linux-image-6.17.0-1013-realtimeUpgrade linux-image-raspi-realtime-6.8 | Apr 17, 2026 | Jan 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub