CVE-2026-80586

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A remote peer can send a malformed Data Sequence Signal (DSS) with an incorrect size, followed by another DSS or Multipath TCP (MPTCP) Control (MPC) and Data. This sequence causes the first suboption to be ignored while leaving certain fields written, potentially leading to data inconsistency or the access of uninitialized data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.