Linux Kernel Vulnerability in MPTCP Implementation by Linux Foundation

CVE-2025-38491

What is CVE-2025-38491?

A vulnerability identified in the Linux kernel's MultiPath TCP (MPTCP) implementation can lead to improper handling of fallback actions and decisions. This issue was reported by Syzkaller, indicating potential instability under certain network conditions. The vulnerability exists when MPTCP attempts to switch to fallback modes without ensuring the actions are atomic, possibly causing undesired behavior during network operations. The affected versions of the kernel require immediate updates to mitigate any potential security risks associated with this flaw.

References