CVE-2025-21706

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the mptcp module, specifically in the mptcp pm nl fullmesh function. The issue allows the fullmesh flag to be set on 'implicit' endpoints, which is not allowed. This was discovered by syzbot, triggering a warning. The vulnerability is related to the in-kernel path-manager and the set flags hook.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.