CVE-2022-50783

mptcp: use proper req destructor for IPv6

N/A
Published: December 24, 2025 at 01:06 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv6 features, e.g. when the request socks contain specific IPv6 options.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.6 ≤ v < 5.10.1635.6 ≤ v < 5.15.875.6 ≤ v < 6.0.185.6 ≤ v < 6.1.45.6 ≤ v < 6.25.679c0949e9a09f6a14a6dd18dc8396029423f9b68
Vendor states this is fixed in 092953f3c4cd65f88b27b87a922f6c725f34ee04 (fixed)
Vendor states this is fixed in 1922ea6b0ae2ea0c9a09be0eafafe1cd1069d259 (fixed)
Vendor states this is fixed in 6eb02c596ec02e5897ae377e065cb7df55337a96 (fixed)
Vendor states this is fixed in bd5dc96fea4edd16d2e22f41b4dd50a4cfbeb919 (fixed)
Vendor states this is fixed in d3295fee3c756ece33ac0d935e172e68c0a4161b (fixed)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.87 (unaffected)
Vendor states this is fixed in 5.6 (unaffected)
Vendor states this is fixed in 6.0.18 (unaffected)
Vendor states this is fixed in 6.1.4 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card