CVE-2023-54085mptcp: fix NULL pointer dereference on fastopen early fallback
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflow_syn_recv_sock() deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not cope with the above unconditionally dereferencing the subflow context.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 36b122baf6a8bd46b4a591f12f4ed17b22257408 before 95135835519b0ab931c39908b2c99e9fb3c9068b; from 36b122baf6a8bd46b4a591f12f4ed17b22257408 before c0ff6f6da66a7791a32c0234388b1bdc00244917 | CNA record |
References
- https://git.kernel.org/stable/c/95135835519b0ab931c39908b2c99e9fb3c9068b
- https://git.kernel.org/stable/c/c0ff6f6da66a7791a32c0234388b1bdc00244917
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.