In the Linux kernel, the following vulnerability has been resolved:

mptcp: options: reset DSS fields in case of unexpected size

A remote peer could send a malformed DSS with a wrong size, followed by
another DSS or MPC + Data. In this case, the first suboption will be
ignored, but leaving some fields written, which could lead to
inconsistency or access uninitialized data.

Explicitly reset the fields that could have been modified in case of
unexpected size.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 15e35fdad7a5576bf3f1c8d688877aeb5d1b506b
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < b1256090816ec46011601e084be580731df58fc7
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 192878df582c51d440bf7b91a15f297f29f2b596
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 26dac5c9ffb20812b475fdf253eb04fab99cff3b
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 4e80eff5c1c893aca2ac1d202f0b256d2e52ecde
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 1fade1b2ac5b1a4948e538fae7313bea57b5ac36
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 27ed642a4e7e4b5df4b8522c72c457a67e052493
648ef4b88673dadb8463bf0d4b10fbf33d55def8 affected < 35772b4981f38ba8059372cde8753e8e477e98ec
Linux Linux affected
Version Status Constraints
5.6 affected —
0 unaffected < 5.6
5.10.266 unaffected ≤ 5.10.*
5.15.217 unaffected ≤ 5.15.*
6.1.184 unaffected ≤ 6.1.*
6.6.153 unaffected ≤ 6.6.*
6.12.105 unaffected ≤ 6.12.*
6.18.46 unaffected ≤ 6.18.*
7.1.10 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/15e35fdad7a5576bf3f1c8d688877aeb5d1b506b cve-icon cve-icon
https://git.kernel.org/stable/c/192878df582c51d440bf7b91a15f297f29f2b596 cve-icon cve-icon
https://git.kernel.org/stable/c/1fade1b2ac5b1a4948e538fae7313bea57b5ac36 cve-icon cve-icon
https://git.kernel.org/stable/c/26dac5c9ffb20812b475fdf253eb04fab99cff3b cve-icon cve-icon
https://git.kernel.org/stable/c/27ed642a4e7e4b5df4b8522c72c457a67e052493 cve-icon cve-icon
https://git.kernel.org/stable/c/35772b4981f38ba8059372cde8753e8e477e98ec cve-icon cve-icon
https://git.kernel.org/stable/c/4e80eff5c1c893aca2ac1d202f0b256d2e52ecde cve-icon cve-icon
https://git.kernel.org/stable/c/b1256090816ec46011601e084be580731df58fc7 cve-icon cve-icon
History

Wed, 26 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665

Wed, 26 Aug 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some fields written, which could lead to inconsistency or access uninitialized data. Explicitly reset the fields that could have been modified in case of unexpected size.
Title mptcp: options: reset DSS fields in case of unexpected size
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-26T14:37:41.493Z

Reserved: 2026-08-26T14:34:25.769Z

Link: CVE-2026-80586

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T15:17:14.873

Modified: 2026-08-26T15:17:14.873

Link: CVE-2026-80586

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T16:30:09Z

Weaknesses