Linux Kernel Vulnerability in MultiPath TCP Subflow Management

CVE-2025-38552

What is CVE-2025-38552?

A race condition in the Linux kernel affects the management of MultiPath Transmission Control Protocol (MPTCP) subflows, leading to potential instability during socket operations. Specifically, this vulnerability arises when a subflow fails concurrently with the creation of new subflows. The newly introduced mechanism involves implementing a dedicated flag, governed by the fallback lock, to enforce socket state and prevent unnecessary subflow creation. This resolution is aimed at enhancing the robustness of MPTCP, ensuring that socket operations remain stable under potential race conditions.

References