Linux Kernel MPTCP Subflow IPv6 Request Destructor Vulnerability

A vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation has been addressed. Previously, the TCP request socket destructor for IPv4 was used, even when the subflow was IPv6. This oversight could lead to memory leaks, particularly with certain advanced IPv6 features that involve specific IPv6 options. The vulnerability has been fixed by ensuring the correct destructor is applied for IPv6 subflows.

Impact

The vulnerability could cause memory leaks in the MPTCP implementation, particularly when handling advanced IPv6 features.

Remediation

Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The specific commit that resolves the issue is available in the Linux kernel stable tree.