CVE-2026-80586
mptcp: options: reset DSS fields in case of unexpected size
Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some fields written, which could lead to inconsistency or access uninitialized data. Explicitly reset the fields that could have been modified in case of unexpected size.
INFO
Published Date :
Aug. 26, 2026, 3:17 p.m.
Last Modified :
Aug. 26, 2026, 3:17 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products
The following products are affected by CVE-2026-80586
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Apply the MPTCP kernel patch.
- Reset DSS fields on unexpected size.
- Ensure data consistency and initialization.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-80586.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-80586 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-80586
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-80586 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-80586 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 26, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some fields written, which could lead to inconsistency or access uninitialized data. Explicitly reset the fields that could have been modified in case of unexpected size. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/80xxx/CVE-2026-80586.json">CVE-2026-80586</a> Added Reference https://git.kernel.org/stable/c/15e35fdad7a5576bf3f1c8d688877aeb5d1b506b Added Reference https://git.kernel.org/stable/c/192878df582c51d440bf7b91a15f297f29f2b596 Added Reference https://git.kernel.org/stable/c/1fade1b2ac5b1a4948e538fae7313bea57b5ac36 Added Reference https://git.kernel.org/stable/c/26dac5c9ffb20812b475fdf253eb04fab99cff3b Added Reference https://git.kernel.org/stable/c/27ed642a4e7e4b5df4b8522c72c457a67e052493 Added Reference https://git.kernel.org/stable/c/35772b4981f38ba8059372cde8753e8e477e98ec Added Reference https://git.kernel.org/stable/c/4e80eff5c1c893aca2ac1d202f0b256d2e52ecde Added Reference https://git.kernel.org/stable/c/b1256090816ec46011601e084be580731df58fc7