SB2025081838 - Improper locking in Linux kernel mptcp

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper locking (CVE-ID: CVE-2025-38552)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the subflow_sched_work_if_closed() and mptcp_subflow_fail() functions in net/mptcp/subflow.c, within the mptcp_data_ready(), __mptcp_finish_join(), __mptcp_retrans(), __mptcp_init_sock() and mptcp_finish_join() functions in net/mptcp/protocol.c, within the mptcp_pm_mp_fail_received() function in net/mptcp/pm.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/659da22dee5ff316ba63bdaeeac7b58b5442f6c2
• https://git.kernel.org/stable/c/7c96d519ee15a130842a6513530b4d20acd2bfcd
• https://git.kernel.org/stable/c/def5b7b2643ebba696fc60ddf675dca13f073486
• https://git.kernel.org/stable/c/f81b6fbe13c7fc413b5158cdffc6a59391a2a8db