Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43252

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating this warning: WARNING: net/mptcp/pm_kernel.c:1074 at __mark_subflow_endp_available net/mptcp/pm_kernel.c:1074 [inline], CPU#1: syz.7.48/2535 WARNING: net/mptcp/pm_kernel.c:1074 at mptcp_pm_nl_fullmesh net/mptcp/pm_kernel.c:1446 [inline], CPU#1: syz.7.48/2535 WARNING: net/mptcp/pm_kernel.c:1074
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c82d2dd48e19353619f7c1ba3b84f99f4150e27f287af3cc2ef22cf872a90d8e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/mptcp/pm_kernel.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d90d73ad183566c81320d453a223f610a280f210","status":"affected","version":"027cca7029bee685a5ca5c4849be5a2c446ce046","versionType":"git"},{"lessThan":"1b3ff4d88b508b73e2bbddb59356311efb7ba192","status":"affected","version":"cb24bdcdecba1c60169efb74d88900888df59907","versionType":"git"},{"lessThan":"7c1d221e475e3d8eb8ed4702392d43f8c5134d1f","status":"affected","version":"e255683c06df572ead96db5e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/mptcp/pm_kernel.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/mptcp/pm_kernel.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d90d73ad183566c81320d453a223f610a280f210","status":"affected","version":"027cca7029bee685a5ca5c4849be5a2c446ce046","versionType":"git"},{"lessThan":"1b3ff4d88b508b73e2bbddb59356311efb7ba192","status":"affected","version":"cb24bdcdecba1c60169efb74d88900888df59907","versionType":"git"},{"lessThan":"7c1d221e475e3d8eb8ed4702392d43f8c5134d1f","status":"affected","version":"e255683c06df572ead96db5e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/mptcp/pm_kernel.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/1b3ff4d88b508b73e2bbddb59356311efb7ba192"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4d480efd98e290c445f4ba476e4dcda5624b1aab"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7c1d221e475e3d8eb8ed4702392d43f8c5134d1f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7e4d88e36e5d0b8ffda637999cbca64c81701a81"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d191101dee25567c2af3b28565f45346c33d65f5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/d90d73ad183566c81320d453a223f610a280f210"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75f1c349cf89373da637c6b6bd5ab337b75eb913e60f419dda019266f6c276cf · sha256:fc51f62491eb6ecb… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer