mptcp: avoid combining some incoming suboptions
In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combinations to be present. That's specially true for suboptions that would be present twice, but with different attributes. The new restrictions are the same as the ones applied on the output side, with mptcp_write_options. The same rules can be reused with a small fix: an MP_FASTCLOSE can be used with a DSS when the sender picks this option [1], which is not the case on Linux. Here are the rules: Which options can be used together? X: mutually exclusive O: often used together C: can be used together in some cases P: could be used together but we prefer not to (optimisations) | Opt: | MPC | MPJ | DSS | ADD | RM | PRIO | FAIL | FC | |------|------|------|------|------|------|------|------|------| | MPC |------|------|------|------|------|------|------|------| | MPJ | X |------|------|------|------|------|------|------| | DSS | X | X |------|------|------|------|------|------| | ADD | X | X | P |------|------|------|------|------| | RM | C | C | C | P |------|------|------|------| | PRIO | X | C | C | C | C |------|------|------| | FAIL | X | X | C | X | X | X |------|------| | FC | X | X | P | X | X | X | X |------| | RST | X | X | X | X | X | X | O | O | |------|------|------|------|------|------|------|------|------| The onl
CVE-2026-80587
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-80587
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "eda7acddf8080bb2d022a8d4b8b2345eb80c63ec",
"lessThan": "0e2210af439755a2af352eea4178261dcf61742e",
"versionType": "git"
},
{
"status": "affected",
"version": "eda7acddf8080bb2d022a8d4b8b2345eb80c63ec",
"lessThan": "dc1d8d3eb345c616fbe922a010fa391c72c54d52",
"versionType": "git"
},
{
"status": "affected",
"version": "eda7acddf8080bb2d022a8d4b8b2345eb80c63ec",
"lessThan": "099bfcbd0c16ae9b50aba2a1bea033e63f895da7",
"versionType": "git"
},
{
"status": "affected",
"version": "eda7acddf8080bb2d022a8d4b8b2345eb80c63ec",
"lessThan": "a04dcc784959e4702048785d87e0d029bd2fbdcb",
"versionType": "git"
},
{
"status": "affected",
"version": "eda7acddf8080bb2d022a8d4b8b2345eb80c63ec",
"lessThan": "6bab907292155513af397a12ccb488acbfc30d79",
"versionType": "git"
},
{
"status": "affected",
"version": "eda7acddf8080bb2d022a8d4b8b2345eb80c63ec",
"lessThan": "b6ee361524641f57b2e2363f7737f20e17f67827",
"versionType": "git"
}
],
"programFiles": [
"net/mptcp/options.c",
"net/mptcp/protocol.h"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.6"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.6",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.15.218",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.6.153",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.105",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.46",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.10",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/mptcp/options.c",
"net/mptcp/protocol.h"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-80587
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #34335 · Revision 1
- Added to Heist Feed
- Publisher date