CVE-2025-68221: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix address removal logic in mptcppmnlrmaddr
Fix inverted WARNONONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 (abnormal state), while normal removals (counter > 0) are ignored.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68221?
CVE-2025-68221 has a moderate severity rating due to its potential impact on address removal logic in the Linux kernel.
How do I fix CVE-2025-68221?
To fix CVE-2025-68221, update to the latest version of the Linux kernel where the vulnerability has been patched.
Who is affected by CVE-2025-68221?
CVE-2025-68221 affects systems running vulnerable versions of the Linux kernel that utilize mptcp (Multipath TCP).
What is mptcp in relation to CVE-2025-68221?
Mptcp (Multipath TCP) is a networking protocol used in Linux that allows multiple paths to be used for a single connection, which is affected by CVE-2025-68221.
What are the implications of CVE-2025-68221?
The implications of CVE-2025-68221 may include improper management of address removal, potentially affecting network performance and reliability.