Riskcovery

CVE-2022-50783

mptcp: use proper req destructor for IPv6

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: use proper req destructor for IPv6

Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6.

It is important to use the right destructor to avoid memory leaks with some advanced IPv6 features, e.g. when the request socks contain specific IPv6 options.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 79c0949e9a09f6a14a6dd18dc8396029423f9b68 to before 6eb02c596ec02e5897ae377e065cb7df55337a96Affected
  • 79c0949e9a09f6a14a6dd18dc8396029423f9b68 to before bd5dc96fea4edd16d2e22f41b4dd50a4cfbeb919Affected
  • 79c0949e9a09f6a14a6dd18dc8396029423f9b68 to before 092953f3c4cd65f88b27b87a922f6c725f34ee04Affected
  • 79c0949e9a09f6a14a6dd18dc8396029423f9b68 to before 1922ea6b0ae2ea0c9a09be0eafafe1cd1069d259Affected
  • 79c0949e9a09f6a14a6dd18dc8396029423f9b68 to before d3295fee3c756ece33ac0d935e172e68c0a4161bAffected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 5.10.163 through 5.10.*Not affected
  • 5.15.87 through 5.15.*Not affected
  • 6.0.18 through 6.0.*Not affected
  • 6.1.4 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.