CVE-2025-38552

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw related to multi-path TCP (MPTCP) where a race condition can occur between subflow failure and subflow creation. This issue is similar to a previously addressed race condition but more difficult to trigger. The problem arises from concurrent access to socket state during subflow management. A flag, allow infinite fallback, is used to track conditions preventing additional subflow creation, protected by a fallback lock. The socket fallback mechanism and receipt of an MP FAIL option influence this flag.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.