Log in Start free

Vulnerability · Published Jun 18, 2025 · Assigned by Linux

CVE-2022-50071mptcp: move subflow cleanup in mptcp_destroy_common()

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.2%top 84.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: mptcp: move subflow cleanup in mptcp_destroy_common() If the mptcp socket creation fails due to a CGROUP_INET_SOCK_CREATE eBPF program, the MPTCP protocol ends-up leaking all the subflows: the related cleanup happens in __mptcp_destroy_sock() that is not invoked in such code path. Address the issue moving the subflow sockets cleanup in the mptcp_destroy_common() helper, which is invoked in every msk cleanup path. Additionally get rid of the intermediate list_splice_init step, which is an unneeded relic from the past. The issue is present since before the reported root cause commit, but any attempt to backport the fix before that hash will require a complete rewrite.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.0.2-1DEBIAN-CVE-2022-50071
Debian:13linux6.0.2-1DEBIAN-CVE-2022-50071
Debian:14linux6.0.2-1DEBIAN-CVE-2022-50071
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux5.15.0-202.212USN-8961-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126USN-8961-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134USN-8961-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133USN-8962-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130USN-8961-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121USN-8961-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110USN-8961-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117USN-8961-1
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120USN-8961-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116USN-8961-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207USN-8961-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115USN-8961-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72USN-8963-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59USN-8963-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122USN-8961-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122UBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2022-50071
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50071
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50071
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-50071
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2022-50071

Affected products (as reported)

VendorProductVersions
Linux Linux e16163b6e2b720fb74e5af758546f6dad27e6c9e – before 6139039c8fc5c9dbcdc3ad389b9a6d0cacb4d693e16163b6e2b720fb74e5af758546f6dad27e6c9e – before c0bf3c6aa444a5ef44acc57ef6cfa53fd4fc1c9b
Linux Linux 5.11

References