Vulnerability in Linux
CVE-2026-23321
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always mark signal+subflow endp as used Syzkaller managed to find a combination of actions that was generating this warning: msk->pm.local_addr_…
EPSS: 0.000 (4.7th percentile) — read the EPSS interpretation.
Affected products
- Linux — versions 6.1.167, 6.19.7, 6.18.17
References
- git.kernel.org/stable/c/c5c877e140e5f46023a74a51e577ce5edd0a4be7
- git.kernel.org/stable/c/05799c2f1ca5eb13d65764dda688d02021b65e06
- git.kernel.org/stable/c/67f34ab318807989b57dfdb0f79e2d4e57018290
- git.kernel.org/stable/c/a64aa7db39392add5be09dffaedbf1f0ce5554df
- git.kernel.org/stable/c/198824ccfa64ffebd918bf99c939bd8170a4a4d8
- git.kernel.org/stable/c/579a752464a64cb5f9139102f0e6b90a1f595ceb