Vulnerability details
CVE-2026-80586
Linux Linux
mptcp: options: reset DSS fields in case of unexpected size
CVSS 3.1
9.8Critical
Official description
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some fields written, which could lead to inconsistency or access uninitialized data. Explicitly reset the fields that could have been modified in case of unexpected size.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 5.6 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < b1256090816ec46011601e084be580731df58fc7 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 192878df582c51d440bf7b91a15f297f29f2b596 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 26dac5c9ffb20812b475fdf253eb04fab99cff3b | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 15e35fdad7a5576bf3f1c8d688877aeb5d1b506b | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 1fade1b2ac5b1a4948e538fae7313bea57b5ac36 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 27ed642a4e7e4b5df4b8522c72c457a67e052493 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 35772b4981f38ba8059372cde8753e8e477e98ec | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 648ef4b88673dadb8463bf0d4b10fbf33d55def8 ≤ v < 4e80eff5c1c893aca2ac1d202f0b256d2e52ecde | CVEProject cvelistV5 (CNA) |
References and advisories
8- https://git.kernel.org/stable/c/15e35fdad7a5576bf3f1c8d688877aeb5d1b506b
- https://git.kernel.org/stable/c/b1256090816ec46011601e084be580731df58fc7
- https://git.kernel.org/stable/c/192878df582c51d440bf7b91a15f297f29f2b596
- https://git.kernel.org/stable/c/26dac5c9ffb20812b475fdf253eb04fab99cff3b
- https://git.kernel.org/stable/c/4e80eff5c1c893aca2ac1d202f0b256d2e52ecde
- https://git.kernel.org/stable/c/1fade1b2ac5b1a4948e538fae7313bea57b5ac36
- https://git.kernel.org/stable/c/27ed642a4e7e4b5df4b8522c72c457a67e052493
- https://git.kernel.org/stable/c/35772b4981f38ba8059372cde8753e8e477e98ec
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-26
- Last updated
- 2026-10-16
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.39%
Probability of exploitation in 30 days
34.2%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- —