CVE-2025-71088 | Linux Kernel up to 6.1.159/6.6.119/6.12.64/6.18.3/6.19-rc3 mptcp net/mptcp/subflow.c sk_state_change state issue

January 13, 2026 Yanac

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.159/6.6.119/6.12.64/6.18.3/6.19-rc3. This issue affects the function sk_state_change of the file net/mptcp/subflow.c of the component mptcp. The manipulation leads to state issue.

This vulnerability is traded as CVE-2025-71088. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More