CVE-2026-97568EPSS p10.3%
CVE-2026-97568CVE-2026-97568
Description
In the Linux kernel, the following vulnerability has been resolved:
mptcp: syncookies: remember the request backup flag
Instead of using an uninitialised bit when copying the info in
subflow_ulp_clone().
To fix this, no need to extend the join_entry structure: backup is
coming from struct mptcp_subflow_request_sock, only one bit. Do the same
here by using one bit for both.
Scoring
| EPSS | 0.21% probability of exploitation · percentile 10.3% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-03 |