CVE-2026-98438

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mptcp module where the mptcp write data fin() function fails to initialize certain values when sending a DATA FIN without data. Because a DATA FIN occupies one octet of the connection-level sequence space, a DSS mapping with specific values is required. If a checksum is negotiated, the initial checksum data must be reset to 0 to be correctly computed and included in the outgoing packet. This occurs because the ext copy structure is no longer zeroed by default.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.