Multipath TCP Context Reset Vulnerability in Linux Kernel

CVE-2025-71144

What is CVE-2025-71144?

This vulnerability occurs in the Linux Kernel's Multipath TCP (MPTCP) implementation. It is due to the failure to reset the subflow context upon disconnection, particularly when the MPC subflow status is in TCP_CLOSE or has reverted to TCP during the disconnect process. As a result, any subsequent connections may start with incorrect flags, potentially leading to unexpected behaviors and system instability. Addressing this issue requires handling the fastclosing flag appropriately during the fast close process to avoid further complications related to subflow states.

References