CVE-2026-31669

CVE-2026-31669 · mptcp: fix slab-use-after-free in __inet_lookup_established

CVSS 9.8 · Critical · EPSS 0.5% · Fix available

Are you affected?

linuxNo fix published
linux Debian 12Update to 6.1.170-1
linux Debian 13Update to 6.12.85-1
linux Debian 14Update to 6.19.13-1
and 19 more

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="linux"'

The free check shows your server's rating and highlights whether linux and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh

Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU to guarantee socket memory stability during RCU read-side critical sections. Both tcp_prot and tcpv6_prot have their slab caches created with this flag via proto_register(). However, MPTCP's mptcp_subflow_init() copies tcpv6_prot into tcpv6_prot_override during inet_init() (fs_initcall, level 5), before inet6_init() (module_init/device_initcall, level 6) has called proto_register(&tcpv6_prot). At that point, tcpv6_prot.slab is still NULL, so tcpv6_prot_override.slab remains NULL permanently. This causes MPTCP v6 subflow child sockets to be allocated via kmalloc (falling into kmalloc-4k) instead of the TCPv6 slab cache. The kmalloc-4k cache lacks SLAB_TYPESAFE_BY_RCU, so when these sockets are freed without SOCK_RCU_FREE (which is cleared for child sockets by design), the memory can be immediately reused. Concurrent ehash lookups under rcu_read_lock can then access freed memory, triggering a slab-use-after-free in __inet_lookup_established. Fix this by splitting the IPv6-specific initialization out of mptcp_subflow_init() into a new mptcp_subflow_v6_init(), called from mptcp_proto_v6_init() before protocol registration. This ensures tcpv6_prot_override.slab correctly inherits the SLAB_TYPESAFE_BY_RCU slab cache.

Published: 2026-04-24T14:45:17.295Z
Updated: 2026-10-19T18:56:03.360Z

Stack: system

Affected products and versions

linux
Versions
- ≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < f6e1f25fa5e733570f6d6fe37a4dfed2a0deba47: Affected (git)
- ≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < fb1f54b7d16f393b8b65d328410f78b4beea8fcc: Affected (git)
- ≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < 3fd6547f5b8ac99687be6d937a0321efda760597: Affected (git)
- ≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < eb9c6aeb512f877cf397deb1e4526f646c70e4a7: Affected (git)
- ≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < 15fa9ead4d5e6b6b9c794e84144146c917f2cb62: Affected (git)
- ≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < b313e9037d98c13938740e5ebda7852929366dff: Affected (git)
All versions (7)
≥ b19bc2945b40b9fd38e835700907ffe8534ef0de, < 9b55b253907e7431210483519c5ad711a37dafa1: Affected (git)
No fix published
linux
Versions
- 5.12: Affected
- ≥ 0, < 5.12: Not affected (semver)
- ≥ 5.15.203, ≤ 5.15.*: Not affected (semver)
- ≥ 6.1.169, ≤ 6.1.*: Not affected (semver)
- ≥ 6.6.135, ≤ 6.6.*: Not affected (semver)
- ≥ 6.12.82, ≤ 6.12.*: Not affected (semver)
All versions (9)
≥ 6.18.23, ≤ 6.18.*: Not affected (semver)
≥ 6.19.13, ≤ 6.19.*: Not affected (semver)
≥ 7.0: Not affected (original_commit_for_fix)
No fix published
linux Debian 12
Versions
- 6.1.106-1
- 6.1.106-2
- 6.1.106-3
- 6.1.112-1
- 6.1.115-1
- 6.1.119-1
All versions (48)
6.1.123-1
6.1.124-1
6.1.128-1
6.1.129-1
6.1.133-1
6.1.135-1
6.1.137-1
6.1.139-1
6.1.140-1
6.1.147-1
6.1.148-1
6.1.153-1
6.1.158-1
6.1.159-1
6.1.162-1
6.1.164-1
6.1.27-1
6.1.37-1
6.1.38-1
6.1.38-2
6.1.38-2~bpo11+1
6.1.38-3
6.1.38-4
6.1.38-4~bpo11+1
6.1.52-1
6.1.55-1
6.1.55-1~bpo11+1
6.1.64-1
6.1.66-1
6.1.67-1
6.1.69-1
6.1.69-1~bpo11+1
6.1.76-1
6.1.76-1~bpo11+1
6.1.82-1
6.1.85-1
6.1.90-1
6.1.90-1~bpo11+1
6.1.94-1
6.1.94-1~bpo11+1
6.1.98-1
6.1.99-1
Affected ranges
- ECOSYSTEM: < 6.1.170-1
Update to 6.1.170-1
linux Debian 13
Versions
- 6.12.38-1
- 6.12.41-1
- 6.12.43-1
- 6.12.43-1~bpo12+1
- 6.12.48-1
- 6.12.57-1
All versions (17)
6.12.57-1~bpo12+1
6.12.63-1
6.12.63-1~bpo12+1
6.12.69-1
6.12.69-1~bpo12+1
6.12.73-1
6.12.73-1~bpo12+1
6.12.74-1
6.12.74-2
6.12.74-2~bpo12+1
6.12.85-1~bpo12+1
Affected ranges
- ECOSYSTEM: < 6.12.85-1
Update to 6.12.85-1
linux Debian 14
Versions
- 6.12.100-1
- 6.12.101-1
- 6.12.105-1
- 6.12.107-1
- 6.12.111-1
- 6.12.113-1
All versions (129)
6.12.38-1
6.12.41-1
6.12.43-1
6.12.43-1~bpo12+1
6.12.48-1
6.12.57-1
6.12.57-1~bpo12+1
6.12.63-1
6.12.63-1~bpo12+1
6.12.69-1
6.12.69-1~bpo12+1
6.12.73-1
6.12.73-1~bpo12+1
6.12.74-1
6.12.74-2
6.12.74-2~bpo12+1
6.12.85-1
6.12.85-1~bpo12+1
6.12.86-1
6.12.86-1~bpo12+1
6.12.88-1
6.12.88-1~bpo12+1
6.12.90-1
6.12.90-1~bpo12+1
6.12.90-2
6.12.90-2~bpo12+1
6.12.94-1
6.12.94-1~bpo12+1
6.12.95-1
6.12.95-1~bpo12+1
6.12.96-1
6.13.10-1~exp1
6.13.11-1~exp1
6.13.2-1~exp1
6.13.3-1~exp1
6.13.4-1~exp1
6.13.5-1~exp1
6.13.6-1~exp1
6.13.7-1~exp1
6.13.8-1~exp1
6.13.9-1~exp1
6.13~rc6-1~exp1
6.13~rc7-1~exp1
6.14.3-1~exp1
6.14.5-1~exp1
6.14.6-1~exp1
6.15-1~exp1
6.15.1-1~exp1
6.15.2-1~exp1
6.15.3-1~exp1
6.15.4-1~exp1
6.15.5-1~exp1
6.15.6-1~exp1
6.15~rc7-1~exp1
6.16-1~exp1
6.16.1-1~exp1
6.16.10-1
6.16.11-1
6.16.12-1
6.16.12-1~bpo13+1
6.16.12-2
6.16.3-1
6.16.3-1~bpo13+1
6.16.5-1
6.16.6-1
6.16.7-1
6.16.8-1
6.16.9-1
6.16~rc7-1~exp1
6.17.10-1
6.17.11-1
6.17.12-1
6.17.13-1
6.17.13-1~bpo13+1
6.17.2-1~exp1
6.17.5-1~exp1
6.17.6-1
6.17.7-1
6.17.7-2
6.17.8-1
6.17.8-1~bpo13+1
6.17.9-1
6.18.1-1~exp1
6.18.10-1
6.18.12-1
6.18.12-1~bpo13+1
6.18.13-1
6.18.14-1
6.18.15-1
6.18.15-1~bpo13+1
6.18.2-1~exp1
6.18.3-1
6.18.5-1
6.18.5-1~bpo13+1
6.18.8-1
6.18.9-1
6.18.9-1~bpo13+1
6.18~rc4-1~exp1
6.18~rc4-1~exp2
6.18~rc5-1~exp1
6.18~rc6-1~exp1
6.18~rc7-1~exp1
6.19-1~exp1
6.19.10-1
6.19.10-1~bpo13+1
6.19.11-1
6.19.11-1~bpo13+1
6.19.12-1
6.19.13-1~bpo13+1
6.19.2-1~exp1
6.19.3-1~exp1
6.19.4-1~exp1
6.19.5-1~exp1
6.19.6-1
6.19.6-2
6.19.6-2~bpo13+1
6.19.8-1
6.19.8-1~bpo13+1
6.19~rc4-1~exp1
6.19~rc5-1~exp1
6.19~rc6-1~exp1
6.19~rc7-1~exp1
6.19~rc8-1~exp1
Affected ranges
- ECOSYSTEM: < 6.19.13-1
Update to 6.19.13-1
linux-hwe-edge Ubuntu 16.04 LTS
Versions
- 4.8.0-28.30~16.04.1
- 4.8.0-30.32~16.04.1
- 4.8.0-32.34~16.04.1
- 4.8.0-34.36~16.04.1
- 4.10.0-14.16~16.04.1
- 4.10.0-19.21~16.04.1
All versions (23)
4.10.0-20.22~16.04.1
4.10.0-21.23~16.04.1
4.10.0-22.24~16.04.1
4.10.0-24.28~16.04.1
4.10.0-26.30~16.04.1
4.11.0-13.19~16.04.1
4.11.0-14.20~16.04.1
4.13.0-16.19~16.04.3
4.13.0-17.20~16.04.1
4.13.0-19.22~16.04.1
4.13.0-21.24~16.04.1
4.13.0-25.29~16.04.2
4.15.0-13.14~16.04.1
4.15.0-15.16~16.04.1
4.15.0-20.21~16.04.1
4.15.0-22.24~16.04.1
4.15.0-23.25~16.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-aws-5.0 Ubuntu 18.04 LTS
Versions
- 5.0.0-1021.24~18.04.1
- 5.0.0-1022.25~18.04.1
- 5.0.0-1023.26~18.04.1
- 5.0.0-1024.27~18.04.1
- 5.0.0-1025.28
- 5.0.0-1027.30
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-aws-5.3 Ubuntu 18.04 LTS
Versions
- 5.3.0-1016.17~18.04.1
- 5.3.0-1017.18~18.04.1
- 5.3.0-1019.21~18.04.1
- 5.3.0-1023.25~18.04.1
- 5.3.0-1028.30~18.04.1
- 5.3.0-1030.32~18.04.1
All versions (10)
5.3.0-1032.34~18.04.2
5.3.0-1033.35
5.3.0-1034.36
5.3.0-1035.37
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-azure Ubuntu 18.04 LTS
Versions
- 4.15.0-1002.2
- 4.15.0-1003.3
- 4.15.0-1004.4
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1012.12
All versions (44)
4.15.0-1013.13
4.15.0-1014.14
4.15.0-1018.18
4.15.0-1019.19
4.15.0-1021.21
4.15.0-1022.23
4.15.0-1023.24
4.15.0-1025.26
4.15.0-1028.29
4.15.0-1030.31
4.15.0-1031.32
4.15.0-1032.33
4.15.0-1035.36
4.15.0-1036.38
4.15.0-1037.39
4.18.0-1011.11~18.04.1
4.18.0-1013.13~18.04.1
4.18.0-1014.14~18.04.1
4.18.0-1018.18~18.04.1
4.18.0-1019.19~18.04.1
4.18.0-1020.20~18.04.1
4.18.0-1023.24~18.04.1
4.18.0-1024.25~18.04.1
4.18.0-1025.27~18.04.1
5.0.0-1014.14~18.04.1
5.0.0-1016.17~18.04.1
5.0.0-1018.19~18.04.1
5.0.0-1020.21~18.04.1
5.0.0-1022.23~18.04.1
5.0.0-1023.24~18.04.1
5.0.0-1025.27~18.04.1
5.0.0-1027.29~18.04.1
5.0.0-1028.30~18.04.1
5.0.0-1029.31~18.04.1
5.0.0-1031.33
5.0.0-1032.34
5.0.0-1035.37
5.0.0-1036.38
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-azure-5.3 Ubuntu 18.04 LTS
Versions
- 5.3.0-1007.8~18.04.1
- 5.3.0-1008.9~18.04.1
- 5.3.0-1009.10~18.04.1
- 5.3.0-1010.11~18.04.1
- 5.3.0-1012.13~18.04.1
- 5.3.0-1013.14~18.04.1
All versions (16)
5.3.0-1016.17~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1019.20~18.04.1
5.3.0-1020.21~18.04.1
5.3.0-1022.23~18.04.1
5.3.0-1028.29~18.04.1
5.3.0-1031.32~18.04.1
5.3.0-1032.33~18.04.1
5.3.0-1034.35~18.04.1
5.3.0-1035.36
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-azure-edge Ubuntu 18.04 LTS
Versions
- 4.18.0-1006.6~18.04.1
- 4.18.0-1007.7~18.04.1
- 4.18.0-1008.8~18.04.1
- 5.0.0-1012.12~18.04.2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gcp Ubuntu 18.04 LTS
Versions
- 4.15.0-1001.1
- 4.15.0-1003.3
- 4.15.0-1005.5
- 4.15.0-1006.6
- 4.15.0-1008.8
- 4.15.0-1009.9
All versions (38)
4.15.0-1010.10
4.15.0-1014.14
4.15.0-1015.15
4.15.0-1017.18
4.15.0-1018.19
4.15.0-1019.20
4.15.0-1021.22
4.15.0-1023.24
4.15.0-1024.25
4.15.0-1025.26
4.15.0-1026.27
4.15.0-1027.28
4.15.0-1028.29
4.15.0-1029.31
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1042.45
4.15.0-1044.70
5.0.0-1020.20~18.04.1
5.0.0-1021.21~18.04.1
5.0.0-1025.26~18.04.1
5.0.0-1026.27~18.04.1
5.0.0-1028.29~18.04.1
5.0.0-1029.30~18.04.1
5.0.0-1031.32
5.0.0-1033.34
5.0.0-1034.35
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gcp-5.3 Ubuntu 18.04 LTS
Versions
- 5.3.0-1008.9~18.04.1
- 5.3.0-1009.10~18.04.1
- 5.3.0-1010.11~18.04.1
- 5.3.0-1012.13~18.04.1
- 5.3.0-1014.15~18.04.1
- 5.3.0-1016.17~18.04.1
All versions (13)
5.3.0-1017.18~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1020.22~18.04.1
5.3.0-1026.28~18.04.1
5.3.0-1029.31~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gke-4.15 Ubuntu 18.04 LTS
Versions
- 4.15.0-1030.32
- 4.15.0-1032.34
- 4.15.0-1033.35
- 4.15.0-1034.36
- 4.15.0-1036.38
- 4.15.0-1037.39
All versions (33)
4.15.0-1040.42
4.15.0-1041.43
4.15.0-1042.44
4.15.0-1044.46
4.15.0-1045.48
4.15.0-1046.49
4.15.0-1048.51
4.15.0-1049.52
4.15.0-1050.53
4.15.0-1052.55
4.15.0-1055.58
4.15.0-1057.60
4.15.0-1058.61
4.15.0-1059.62
4.15.0-1063.66
4.15.0-1064.67
4.15.0-1066.69
4.15.0-1067.70
4.15.0-1069.72
4.15.0-1070.73
4.15.0-1072.76
4.15.0-1073.78
4.15.0-1074.79
4.15.0-1076.81
4.15.0-1077.82
4.15.0-1078.83
4.15.0-1079.84
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gke-5.4 Ubuntu 18.04 LTS
Versions
- 5.4.0-1025.25~18.04.1
- 5.4.0-1027.28~18.04.1
- 5.4.0-1029.31~18.04.1
- 5.4.0-1030.32~18.04.1
- 5.4.0-1032.34~18.04.1
- 5.4.0-1033.35~18.04.1
All versions (37)
5.4.0-1035.37~18.04.1
5.4.0-1036.38~18.04.1
5.4.0-1037.39~18.04.1
5.4.0-1039.41~18.04.1
5.4.0-1040.42~18.04.1
5.4.0-1042.44~18.04.1
5.4.0-1043.45~18.04.1
5.4.0-1044.46~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1
5.4.0-1052.55~18.04.1
5.4.0-1053.56~18.04.1
5.4.0-1054.57~18.04.1
5.4.0-1055.58~18.04.1
5.4.0-1056.59~18.04.1
5.4.0-1057.60~18.04.1
5.4.0-1059.62~18.04.1
5.4.0-1061.64~18.04.1
5.4.0-1062.65~18.04.1
5.4.0-1063.66~18.04.1
5.4.0-1065.68~18.04.1
5.4.0-1066.69~18.04.1
5.4.0-1067.70~18.04.1
5.4.0-1068.71~18.04.1
5.4.0-1071.76~18.04.3
5.4.0-1072.77~18.04.1
5.4.0-1074.79~18.04.1
5.4.0-1076.82~18.04.1
5.4.0-1078.84~18.04.1
5.4.0-1080.86~18.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-gkeop-5.4 Ubuntu 18.04 LTS
Versions
- 5.4.0-1001.1
- 5.4.0-1003.3
- 5.4.0-1004.5
- 5.4.0-1005.6
- 5.4.0-1007.8~18.04.1
- 5.4.0-1008.9~18.04.1
All versions (37)
5.4.0-1009.10~18.04.1
5.4.0-1010.11~18.04.1
5.4.0-1011.12~18.04.2
5.4.0-1012.13~18.04.1
5.4.0-1013.14~18.04.1
5.4.0-1014.15~18.04.1
5.4.0-1015.16~18.04.1
5.4.0-1016.17~18.04.1
5.4.0-1018.19~18.04.1
5.4.0-1021.22~18.04.1
5.4.0-1022.23~18.04.1
5.4.0-1023.24~18.04.1
5.4.0-1024.25~18.04.1
5.4.0-1025.26~18.04.1
5.4.0-1026.27~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.30~18.04.2
5.4.0-1031.32~18.04.1
5.4.0-1032.33~18.04.1
5.4.0-1033.34~18.04.1
5.4.0-1034.35~18.04.1
5.4.0-1036.37~18.04.1
5.4.0-1037.38~18.04.1
5.4.0-1038.39~18.04.1
5.4.0-1039.40~18.04.1
5.4.0-1040.41~18.04.1
5.4.0-1043.44~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1048.51~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-hwe Ubuntu 18.04 LTS
Versions
- 4.18.0-13.14~18.04.1
- 4.18.0-14.15~18.04.1
- 4.18.0-15.16~18.04.1
- 4.18.0-16.17~18.04.1
- 4.18.0-17.18~18.04.1
- 4.18.0-18.19~18.04.1
All versions (43)
4.18.0-20.21~18.04.1
4.18.0-21.22~18.04.1
4.18.0-22.23~18.04.1
4.18.0-24.25~18.04.1
4.18.0-25.26~18.04.1
5.0.0-23.24~18.04.1
5.0.0-25.26~18.04.1
5.0.0-27.28~18.04.1
5.0.0-29.31~18.04.1
5.0.0-31.33~18.04.1
5.0.0-32.34~18.04.2
5.0.0-35.38~18.04.1
5.0.0-36.39~18.04.1
5.0.0-37.40~18.04.1
5.3.0-26.28~18.04.1
5.3.0-28.30~18.04.1
5.3.0-40.32~18.04.1
5.3.0-42.34~18.04.1
5.3.0-45.37~18.04.1
5.3.0-46.38~18.04.1
5.3.0-51.44~18.04.2
5.3.0-53.47~18.04.1
5.3.0-59.53~18.04.1
5.3.0-61.55~18.04.1
5.3.0-62.56~18.04.1
5.3.0-64.58~18.04.1
5.3.0-65.59
5.3.0-66.60
5.3.0-67.61
5.3.0-68.63
5.3.0-69.65
5.3.0-70.66
5.3.0-72.68
5.3.0-73.69
5.3.0-74.70
5.3.0-75.71
5.3.0-76.72
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-hwe-edge Ubuntu 18.04 LTS
Versions
- 5.0.0-15.16~18.04.1
- 5.0.0-16.17~18.04.1
- 5.0.0-17.18~18.04.1
- 5.0.0-19.20~18.04.1
- 5.0.0-20.21~18.04.1
- 5.3.0-19.20~18.04.2
All versions (10)
5.3.0-22.24~18.04.1
5.3.0-23.25~18.04.1
5.3.0-23.25~18.04.2
5.3.0-24.26~18.04.2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-oem Ubuntu 18.04 LTS
Versions
- 4.15.0-1002.3
- 4.15.0-1004.5
- 4.15.0-1006.9
- 4.15.0-1008.11
- 4.15.0-1009.12
- 4.15.0-1012.15
All versions (50)
4.15.0-1013.16
4.15.0-1015.18
4.15.0-1017.20
4.15.0-1018.21
4.15.0-1021.24
4.15.0-1024.29
4.15.0-1026.31
4.15.0-1028.33
4.15.0-1030.35
4.15.0-1033.38
4.15.0-1034.39
4.15.0-1035.40
4.15.0-1036.41
4.15.0-1038.43
4.15.0-1039.44
4.15.0-1043.48
4.15.0-1045.50
4.15.0-1050.57
4.15.0-1056.65
4.15.0-1057.66
4.15.0-1059.68
4.15.0-1063.72
4.15.0-1064.73
4.15.0-1065.75
4.15.0-1066.76
4.15.0-1067.77
4.15.0-1069.79
4.15.0-1073.83
4.15.0-1076.86
4.15.0-1079.89
4.15.0-1080.90
4.15.0-1081.91
4.15.0-1087.97
4.15.0-1090.100
4.15.0-1091.101
4.15.0-1093.103
4.15.0-1094.104
4.15.0-1096.106
4.15.0-1097.107
4.15.0-1099.109
4.15.0-1100.110
4.15.0-1101.112
4.15.0-1102.113
4.15.0-1103.114
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-oracle-5.0 Ubuntu 18.04 LTS
Versions
- 5.0.0-1007.12~18.04.1
- 5.0.0-1008.13~18.04.1
- 5.0.0-1009.14~18.04.1
- 5.0.0-1010.15~18.04.1
- 5.0.0-1011.16
- 5.0.0-1013.18
All versions (7)
5.0.0-1014.19
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-oracle-5.3 Ubuntu 18.04 LTS
Versions
- 5.3.0-1011.12~18.04.1
- 5.3.0-1013.14~18.04.1
- 5.3.0-1014.15~18.04.1
- 5.3.0-1016.18~18.04.1
- 5.3.0-1018.20~18.04.1
- 5.3.0-1024.26~18.04.1
All versions (9)
5.3.0-1027.29~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-aws-5.11 Ubuntu 20.04 LTS
Versions
- 5.11.0-1009.9~20.04.2
- 5.11.0-1014.15~20.04.1
- 5.11.0-1016.17~20.04.1
- 5.11.0-1017.18~20.04.1
- 5.11.0-1019.20~20.04.1
- 5.11.0-1020.21~20.04.2
All versions (12)
5.11.0-1021.22~20.04.2
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-aws-5.13 Ubuntu 20.04 LTS
Versions
- 5.13.0-1008.9~20.04.2
- 5.13.0-1011.12~20.04.1
- 5.13.0-1012.13~20.04.1
- 5.13.0-1014.15~20.04.1
- 5.13.0-1017.19~20.04.1
- 5.13.0-1019.21~20.04.1
All versions (13)
5.13.0-1021.23~20.04.2
5.13.0-1022.24~20.04.1
5.13.0-1023.25~20.04.1
5.13.0-1025.27~20.04.1
5.13.0-1028.31~20.04.1
5.13.0-1029.32~20.04.1
5.13.0-1031.35~20.04.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux-aws-5.15 Ubuntu Pro 20.04 LTS
Versions
- 5.15.0-1014.18~20.04.1
- 5.15.0-1015.19~20.04.1
- 5.15.0-1017.21~20.04.1
- 5.15.0-1019.23~20.04.1
- 5.15.0-1020.24~20.04.1
- 5.15.0-1021.25~20.04.1
All versions (77)
5.15.0-1022.26~20.04.1
5.15.0-1023.27~20.04.1
5.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
5.15.0-1028.32~20.04.1
5.15.0-1030.34~20.04.1
5.15.0-1031.35~20.04.1
5.15.0-1033.37~20.04.1
5.15.0-1034.38~20.04.1
5.15.0-1035.39~20.04.1
5.15.0-1036.40~20.04.1
5.15.0-1037.41~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1039.44~20.04.1
5.15.0-1040.45~20.04.1
5.15.0-1041.46~20.04.1
5.15.0-1043.48~20.04.1
5.15.0-1044.49~20.04.1
5.15.0-1045.50~20.04.1
5.15.0-1047.52~20.04.1
5.15.0-1048.53~20.04.1
5.15.0-1049.54~20.04.1
5.15.0-1050.55~20.04.1
5.15.0-1051.56~20.04.1
5.15.0-1052.57~20.04.1
5.15.0-1053.58~20.04.1
5.15.0-1055.60~20.04.1
5.15.0-1056.61~20.04.1
5.15.0-1057.63~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1068.74~20.04.1
5.15.0-1069.75~20.04.1
5.15.0-1070.76~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.1
5.15.0-1075.82~20.04.1
5.15.0-1077.84~20.04.1
5.15.0-1080.87~20.04.1
5.15.0-1081.88~20.04.1
5.15.0-1082.89~20.04.1
5.15.0-1083.90~20.04.1
5.15.0-1084.91~20.04.1
5.15.0-1086.93~20.04.1
5.15.0-1087.94~20.04.1
5.15.0-1088.95~20.04.1
5.15.0-1089.96~20.04.1
5.15.0-1090.97~20.04.1
5.15.0-1091.98~20.04.1
5.15.0-1092.99~20.04.1
5.15.0-1093.100~20.04.1
5.15.0-1095.102~20.04.1
5.15.0-1096.103~20.04.1
5.15.0-1097.104~20.04.1
5.15.0-1098.105~20.04.1
5.15.0-1099.106~20.04.1
5.15.0-1100.107~20.04.2
5.15.0-1101.108~20.04.1
5.15.0-1103.110~20.04.1
5.15.0-1104.111~20.04.1
5.15.0-1105.112~20.04.1
5.15.0-1106.113~20.04.1
5.15.0-1108.115~20.04.1
5.15.0-1109.116~20.04.1
Affected ranges
- ECOSYSTEM: < 5.15.0-1111.118~20.04.1
Update to 5.15.0-1111.118~20.04.1

Original sources

Check your server →

CVE-2026-31669 · mptcp: fix slab-use-after-free in __inet_lookup_established

Are you affected?

Affected products and versions

linux

linux

linux Debian 12

linux Debian 13

linux Debian 14

linux-hwe-edge Ubuntu 16.04 LTS

linux-aws-5.0 Ubuntu 18.04 LTS

linux-aws-5.3 Ubuntu 18.04 LTS

linux-azure Ubuntu 18.04 LTS

linux-azure-5.3 Ubuntu 18.04 LTS

linux-azure-edge Ubuntu 18.04 LTS

linux-gcp Ubuntu 18.04 LTS

linux-gcp-5.3 Ubuntu 18.04 LTS

linux-gke-4.15 Ubuntu 18.04 LTS

linux-gke-5.4 Ubuntu 18.04 LTS

linux-gkeop-5.4 Ubuntu 18.04 LTS

linux-hwe Ubuntu 18.04 LTS

linux-hwe-edge Ubuntu 18.04 LTS

linux-oem Ubuntu 18.04 LTS

linux-oracle-5.0 Ubuntu 18.04 LTS

linux-oracle-5.3 Ubuntu 18.04 LTS

linux-aws-5.11 Ubuntu 20.04 LTS

linux-aws-5.13 Ubuntu 20.04 LTS

linux-aws-5.15 Ubuntu Pro 20.04 LTS

Original sources