{"id":"CVE-2026-97568","state":"PUBLISHED","title":"mptcp: syncookies: remember the request backup flag","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: syncookies: remember the request backup flag\n\nInstead of using an uninitialised bit when copying the info in\nsubflow_ulp_clone().\n\nTo fix this, no need to extend the join_entry structure: backup is\ncoming from struct mptcp_subflow_request_sock, only one bit. Do the same\nhere by using one bit for both.","publishedAt":"2026-09-25T10:21:54.269Z","updatedAt":"2026-10-19T09:09:31.044Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"1008f2bcbc8e461c1df3aebba30ac4f616ebe570","status":"affected","lessThan":"c97fa2c7ada82d4cac1c6c00643238dc4c462f15","versionType":"git"},{"version":"6f01f41b6a492ddf2da7609967cfaf57e7ca48a7","status":"affected","lessThan":"1668b34452009d27be3262646de748a3e48ffd51","versionType":"git"},{"version":"09176f80995105c62939728fbad5c437d61e7ff4","status":"affected","lessThan":"b138e7dc719f0a3949de8bb6500b8cf1604eea06","versionType":"git"},{"version":"8ed3e34c766e8264d5d2e0436f86c51604d6a8a7","status":"affected","lessThan":"360d99258a6402cb8e49771460944f19f04d25b7","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"61178d0b85b4b1b53e78b06e89d018d22d102f88","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"00b2bd518911e0daab00f4749cce68c191ccebb4","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"06d649f9cd03a9f8e768a658b20acf8d2c8022e0","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"b76c0e28b392620dfbaf92cdeedbf115820b44cb","versionType":"git"},{"version":"73e2baa301ee3f62ff971e68877adeb37f98cc67","status":"affected","versionType":"git"},{"version":"5.10.224","status":"affected","lessThan":"5.10.271","versionType":"semver"},{"version":"5.15.165","status":"affected","lessThan":"5.15.222","versionType":"semver"},{"version":"6.1.104","status":"affected","lessThan":"6.1.189","versionType":"semver"},{"version":"6.6.45","status":"affected","lessThan":"6.6.158","versionType":"semver"},{"version":"6.10.4","status":"affected","lessThan":"6.11","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mptcp/syncookies.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.11","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.11","versionType":"semver"},{"version":"5.10.271","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.222","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.189","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.158","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.111","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.53","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.7","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mptcp/syncookies.c"]}],"references":["https://git.kernel.org/stable/c/c97fa2c7ada82d4cac1c6c00643238dc4c462f15","https://git.kernel.org/stable/c/1668b34452009d27be3262646de748a3e48ffd51","https://git.kernel.org/stable/c/b138e7dc719f0a3949de8bb6500b8cf1604eea06","https://git.kernel.org/stable/c/360d99258a6402cb8e49771460944f19f04d25b7","https://git.kernel.org/stable/c/61178d0b85b4b1b53e78b06e89d018d22d102f88","https://git.kernel.org/stable/c/00b2bd518911e0daab00f4749cce68c191ccebb4","https://git.kernel.org/stable/c/06d649f9cd03a9f8e768a658b20acf8d2c8022e0","https://git.kernel.org/stable/c/b76c0e28b392620dfbaf92cdeedbf115820b44cb"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:43.249Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/97xxx/CVE-2026-97568.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-97568","state":"PUBLISHED","datePublished":"2026-09-25T10:21:54.269Z","dateUpdated":"2026-10-19T09:09:31.044Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-09-24T16:01:01.155Z"},"containers":{"cna":{"title":"mptcp: syncookies: remember the request backup flag","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: syncookies: remember the request backup flag\n\nInstead of using an uninitialised bit when copying the info in\nsubflow_ulp_clone().\n\nTo fix this, no need to extend the join_entry structure: backup is\ncoming from struct mptcp_subflow_request_sock, only one bit. Do the same\nhere by using one bit for both."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"1008f2bcbc8e461c1df3aebba30ac4f616ebe570","status":"affected","lessThan":"c97fa2c7ada82d4cac1c6c00643238dc4c462f15","versionType":"git"},{"version":"6f01f41b6a492ddf2da7609967cfaf57e7ca48a7","status":"affected","lessThan":"1668b34452009d27be3262646de748a3e48ffd51","versionType":"git"},{"version":"09176f80995105c62939728fbad5c437d61e7ff4","status":"affected","lessThan":"b138e7dc719f0a3949de8bb6500b8cf1604eea06","versionType":"git"},{"version":"8ed3e34c766e8264d5d2e0436f86c51604d6a8a7","status":"affected","lessThan":"360d99258a6402cb8e49771460944f19f04d25b7","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"61178d0b85b4b1b53e78b06e89d018d22d102f88","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"00b2bd518911e0daab00f4749cce68c191ccebb4","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"06d649f9cd03a9f8e768a658b20acf8d2c8022e0","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","status":"affected","lessThan":"b76c0e28b392620dfbaf92cdeedbf115820b44cb","versionType":"git"},{"version":"73e2baa301ee3f62ff971e68877adeb37f98cc67","status":"affected","versionType":"git"},{"version":"5.10.224","status":"affected","lessThan":"5.10.271","versionType":"semver"},{"version":"5.15.165","status":"affected","lessThan":"5.15.222","versionType":"semver"},{"version":"6.1.104","status":"affected","lessThan":"6.1.189","versionType":"semver"},{"version":"6.6.45","status":"affected","lessThan":"6.6.158","versionType":"semver"},{"version":"6.10.4","status":"affected","lessThan":"6.11","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mptcp/syncookies.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.11","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.11","versionType":"semver"},{"version":"5.10.271","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.222","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.189","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.158","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.111","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.53","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.7","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mptcp/syncookies.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/c97fa2c7ada82d4cac1c6c00643238dc4c462f15"},{"url":"https://git.kernel.org/stable/c/1668b34452009d27be3262646de748a3e48ffd51"},{"url":"https://git.kernel.org/stable/c/b138e7dc719f0a3949de8bb6500b8cf1604eea06"},{"url":"https://git.kernel.org/stable/c/360d99258a6402cb8e49771460944f19f04d25b7"},{"url":"https://git.kernel.org/stable/c/61178d0b85b4b1b53e78b06e89d018d22d102f88"},{"url":"https://git.kernel.org/stable/c/00b2bd518911e0daab00f4749cce68c191ccebb4"},{"url":"https://git.kernel.org/stable/c/06d649f9cd03a9f8e768a658b20acf8d2c8022e0"},{"url":"https://git.kernel.org/stable/c/b76c0e28b392620dfbaf92cdeedbf115820b44cb"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-19T09:09:31.044Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.224","versionEndExcluding":"5.10.271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.165","versionEndExcluding":"5.15.222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.104","versionEndExcluding":"6.1.189"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.45","versionEndExcluding":"6.6.158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"6.12.111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"6.18.53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"7.2.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"7.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.10.4"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}