Vulnerability in Linux

CVE-2025-68221

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr Fix inverted WARN_ON_ONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 (abnormal state), while normal removals (counter > 0) are ignored.

EPSS: 0.002 (7.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 63611391850850bf27f81afb0d0b6d1237a34006, 6.15, 0

References