https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:24:06 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38552 <p><strong>Affected:</strong> Linux, Siemens SIMATIC CN 4100</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mptcp: plug races between subflow fail and subflow creation</p> <p>We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger.</p> <p>The solution is similar. Use a separate flag to track the condition &#39;socket state prevent any additional subflow creation&#39; protected by the fallback lock.</p> <p>The socket fallback makes such flag true, and also receiving or sending an MP_FAIL option.</p> <p>The field &#39;allow_infinite_fallback&#39; is now always touched under the relevant lock, we can drop the ONCE annotation on write.</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC CN 4100</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mptcp: plug races between subflow fail and subflow creation</p> <p>We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger.</p> <p>The solution is similar. Use a separate flag to track the condition &#39;socket state prevent any additional subflow creation&#39; protected by the fallback lock.</p> <p>The socket fallback makes such flag true, and also receiving or sending an MP_FAIL option.</p> <p>The field &#39;allow_infinite_fallback&#39; is now always touched under the relevant lock, we can drop the ONCE annotation on write.</p> https://vulnerability.circl.lu/vuln/cve-2025-38552