CVE-2026-97568
Status: ReceivedUnscored—
In the Linux kernel, the following vulnerability has been resolved:
mptcp: syncookies: remember the request backup flag
Instead of using an uninitialised bit when copying the info in subflow_ulp_clone().
To fix this, no need to extend the join_entry structure: backup is coming from struct mptcp_subflow_request_sock, only one bit. Do the same here by using one bit for both.
CVSS
NVD hasn't assigned a CVSS score to this CVE (common since the April 2026 policy change).
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.21%
- Percentile among all scored CVEs: 10
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.
References
- https://git.kernel.org/stable/c/00b2bd518911e0daab00f4749cce68c191ccebb4
- https://git.kernel.org/stable/c/06d649f9cd03a9f8e768a658b20acf8d2c8022e0
- https://git.kernel.org/stable/c/1668b34452009d27be3262646de748a3e48ffd51
- https://git.kernel.org/stable/c/360d99258a6402cb8e49771460944f19f04d25b7
- https://git.kernel.org/stable/c/61178d0b85b4b1b53e78b06e89d018d22d102f88
- https://git.kernel.org/stable/c/b138e7dc719f0a3949de8bb6500b8cf1604eea06
- https://git.kernel.org/stable/c/b76c0e28b392620dfbaf92cdeedbf115820b44cb
- https://git.kernel.org/stable/c/c97fa2c7ada82d4cac1c6c00643238dc4c462f15
Raw JSON (NVD)
Show
{
"id": "CVE-2026-97568",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "1008f2bcbc8e461c1df3aebba30ac4f616ebe570",
"lessThan": "c97fa2c7ada82d4cac1c6c00643238dc4c462f15",
"versionType": "git"
},
{
"status": "affected",
"version": "6f01f41b6a492ddf2da7609967cfaf57e7ca48a7",
"lessThan": "1668b34452009d27be3262646de748a3e48ffd51",
"versionType": "git"
},
{
"status": "affected",
"version": "09176f80995105c62939728fbad5c437d61e7ff4",
"lessThan": "b138e7dc719f0a3949de8bb6500b8cf1604eea06",
"versionType": "git"
},
{
"status": "affected",
"version": "8ed3e34c766e8264d5d2e0436f86c51604d6a8a7",
"lessThan": "360d99258a6402cb8e49771460944f19f04d25b7",
"versionType": "git"
},
{
"status": "affected",
"version": "efd340bf3d7779a3a8ec954d8ec0fb8a10f24982",
"lessThan": "61178d0b85b4b1b53e78b06e89d018d22d102f88",
"versionType": "git"
},
{
"status": "affected",
"version": "efd340bf3d7779a3a8ec954d8ec0fb8a10f24982",
"lessThan": "00b2bd518911e0daab00f4749cce68c191ccebb4",
"versionType": "git"
},
{
"status": "affected",
"version": "efd340bf3d7779a3a8ec954d8ec0fb8a10f24982",
"lessThan": "06d649f9cd03a9f8e768a658b20acf8d2c8022e0",
"versionType": "git"
},
{
"status": "affected",
"version": "efd340bf3d7779a3a8ec954d8ec0fb8a10f24982",
"lessThan": "b76c0e28b392620dfbaf92cdeedbf115820b44cb",
"versionType": "git"
},
{
"status": "affected",
"version": "73e2baa301ee3f62ff971e68877adeb37f98cc67",
"versionType": "git"
},
{
"status": "affected",
"version": "5.10.224",
"lessThan": "5.10.271",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.165",
"lessThan": "5.15.222",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.104",
"lessThan": "6.1.189",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.45",
"lessThan": "6.6.158",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.10.4",
"lessThan": "6.11",
"versionType": "semver"
}
],
"programFiles": [
"net/mptcp/syncookies.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.11"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.11",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.271",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.111",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3-rc3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/mptcp/syncookies.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-09-25T11:17:07.453",
"references": [
{
"url": "https://git.kernel.org/stable/c/00b2bd518911e0daab00f4749cce68c191ccebb4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/06d649f9cd03a9f8e768a658b20acf8d2c8022e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/1668b34452009d27be3262646de748a3e48ffd51",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/360d99258a6402cb8e49771460944f19f04d25b7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/61178d0b85b4b1b53e78b06e89d018d22d102f88",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b138e7dc719f0a3949de8bb6500b8cf1604eea06",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b76c0e28b392620dfbaf92cdeedbf115820b44cb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c97fa2c7ada82d4cac1c6c00643238dc4c462f15",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: syncookies: remember the request backup flag\n\nInstead of using an uninitialised bit when copying the info in\nsubflow_ulp_clone().\n\nTo fix this, no need to extend the join_entry structure: backup is\ncoming from struct mptcp_subflow_request_sock, only one bit. Do the same\nhere by using one bit for both."
}
],
"lastModified": "2026-10-03T11:18:04.190",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}