Към съдържанието
Търсене

CVE-2026-80587: Linux

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combinations to be present. That's specially true for suboptions that would be present twice, but with different attributes. The new restrictions are the same as the ones applied on the output side, with mptcp_write_options. The same rules can be reused with a small fix: an MP_FASTCLOSE can be used with a DSS when the sender picks this option [1], which is not the case on Linux. Here are the rules: Which options can be used together? X: mutually exclusive O: often used together C: can be used together in some cases P: could be used together but we prefer not to (optimisations) | Opt: | MPC | MPJ | DSS | ADD | RM | PRIO | FAIL | FC | |------|------|------|------|------|------|------|------|------| | MPC |------|------|------|------|------|------|------|------| | MPJ | X |------|------|------|------|------|------|------| | DSS | X | X |------|------|------|------|------|------| | ADD | X | X | P |------|------|------|------|------| | RM | C | C | C | P |------|------|------|------| | PRIO | X | C | C | C | C |------|------|------| | FAIL | X | X | C | X | X | X |------|------| | FC | X | X | P | X | X | X | X |------| | RST | X | X | X | X | X | X | O | O | |------|------|------|------|------|------|------|------|------| The only difference is with the 'P': another stack could send and ADD_ADDR with other suboptions (DSS, RM_ADDR), and this should be allowed. A few points of attention: - In theory, an MP_CAPABLE could be used with a RM_ADDR, but there is no reason to add it with a SYN. Note that even with a 4th ACK, it doesn't seem to be useful, e

Засегнати продукти

  • Linux Linux: eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди 0e2210af439755a2af352eea4178261dcf61742e; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди d1bce616636c1c42649966677973490a510055c4; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди dc1d8d3eb345c616fbe922a010fa391c72c54d52; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди 099bfcbd0c16ae9b50aba2a1bea033e63f895da7; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди a04dcc784959e4702048785d87e0d029bd2fbdcb; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди 6bab907292155513af397a12ccb488acbfc30d79; eda7acddf8080bb2d022a8d4b8b2345eb80c63ec преди b6ee361524641f57b2e2363f7737f20e17f67827
  • Linux Linux: 5.6; преди 5.6; 5.15.218 до 5.15.*; 6.1.191 до 6.1.*; 6.6.153 до 6.6.*; 6.12.105 до 6.12.*; 6.18.46 до 6.18.*; 7.1.10 до 7.1.*; 7.2 до *

История

  • 26 август 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-80587: Linux | freedomonline.bg