Acknowledged
Created: Jun 18, 2025
Updated: Sep 4, 2026
Resolved Date: Jun 19, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]mptcp: move subflow cleanup in mptcp_destroy_common()[EOL][EOL]If the mptcp socket creation fails due to a CGROUP_INET_SOCK_CREATE[EOL]eBPF program, the MPTCP protocol ends-up leaking all the subflows:[EOL]the related cleanup happens in __mptcp_destroy_sock() that is not[EOL]invoked in such code path.[EOL][EOL]Address the issue moving the subflow sockets cleanup in the[EOL]mptcp_destroy_common() helper, which is invoked in every msk cleanup[EOL]path.[EOL][EOL]Additionally get rid of the intermediate list_splice_init step, which[EOL]is an unneeded relic from the past.[EOL][EOL]The issue is present since before the reported root cause commit, but[EOL]any attempt to backport the fix before that hash will require a complete[EOL]rewrite.
CREATE(Triage):(User=lchen-cn) [CVE-2022-50071 (https://nvd.nist.gov/vuln/detail/CVE-2022-50071)
