{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-97568","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2026-09-24T16:01:01.155Z","datePublished":"2026-09-25T10:21:54.269Z","dateUpdated":"2026-10-03T10:59:44.503Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2026-10-03T10:59:44.503Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: syncookies: remember the request backup flag\n\nInstead of using an uninitialised bit when copying the info in\nsubflow_ulp_clone().\n\nTo fix this, no need to extend the join_entry structure: backup is\ncoming from struct mptcp_subflow_request_sock, only one bit. Do the same\nhere by using one bit for both."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mptcp/syncookies.c"],"versions":[{"version":"1008f2bcbc8e461c1df3aebba30ac4f616ebe570","lessThan":"c97fa2c7ada82d4cac1c6c00643238dc4c462f15","status":"affected","versionType":"git"},{"version":"6f01f41b6a492ddf2da7609967cfaf57e7ca48a7","lessThan":"1668b34452009d27be3262646de748a3e48ffd51","status":"affected","versionType":"git"},{"version":"09176f80995105c62939728fbad5c437d61e7ff4","lessThan":"b138e7dc719f0a3949de8bb6500b8cf1604eea06","status":"affected","versionType":"git"},{"version":"8ed3e34c766e8264d5d2e0436f86c51604d6a8a7","lessThan":"360d99258a6402cb8e49771460944f19f04d25b7","status":"affected","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","lessThan":"61178d0b85b4b1b53e78b06e89d018d22d102f88","status":"affected","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","lessThan":"00b2bd518911e0daab00f4749cce68c191ccebb4","status":"affected","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","lessThan":"06d649f9cd03a9f8e768a658b20acf8d2c8022e0","status":"affected","versionType":"git"},{"version":"efd340bf3d7779a3a8ec954d8ec0fb8a10f24982","lessThan":"b76c0e28b392620dfbaf92cdeedbf115820b44cb","status":"affected","versionType":"git"},{"version":"73e2baa301ee3f62ff971e68877adeb37f98cc67","status":"affected","versionType":"git"},{"version":"5.10.224","lessThan":"5.10.271","status":"affected","versionType":"semver"},{"version":"5.15.165","lessThan":"5.15.222","status":"affected","versionType":"semver"},{"version":"6.1.104","lessThan":"6.1.189","status":"affected","versionType":"semver"},{"version":"6.6.45","lessThan":"6.6.158","status":"affected","versionType":"semver"},{"version":"6.10.4","lessThan":"6.11","status":"affected","versionType":"semver"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/mptcp/syncookies.c"],"versions":[{"version":"6.11","status":"affected"},{"version":"0","lessThan":"6.11","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3-rc3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.224","versionEndExcluding":"5.10.271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.165","versionEndExcluding":"5.15.222"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.104","versionEndExcluding":"6.1.189"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.45","versionEndExcluding":"6.6.158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"6.12.111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"6.18.53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"7.2.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.11","versionEndExcluding":"7.3-rc3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.10.4"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/c97fa2c7ada82d4cac1c6c00643238dc4c462f15"},{"url":"https://git.kernel.org/stable/c/1668b34452009d27be3262646de748a3e48ffd51"},{"url":"https://git.kernel.org/stable/c/b138e7dc719f0a3949de8bb6500b8cf1604eea06"},{"url":"https://git.kernel.org/stable/c/360d99258a6402cb8e49771460944f19f04d25b7"},{"url":"https://git.kernel.org/stable/c/61178d0b85b4b1b53e78b06e89d018d22d102f88"},{"url":"https://git.kernel.org/stable/c/00b2bd518911e0daab00f4749cce68c191ccebb4"},{"url":"https://git.kernel.org/stable/c/06d649f9cd03a9f8e768a658b20acf8d2c8022e0"},{"url":"https://git.kernel.org/stable/c/b76c0e28b392620dfbaf92cdeedbf115820b44cb"}],"title":"mptcp: syncookies: remember the request backup flag","x_generator":{"engine":"bippy-1.2.0"}}}}