CVE-2023-54085
High
Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflow_syn_recv_sock() deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not cope with the above unconditionally dereferencing the subflow context.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux95135835519b0ab931c39908b2c99e9fb3c9068b, c0ff6f6da66a7791a32c0234388b1bdc00244917 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 36b122baf6a8bd46b4a591f12f4ed17b22257408 ≤ v < 95135835519b0ab931c39908b2c99e9fb3c9068b, 36b122baf6a8bd46b4a591f12f4ed17b22257408 ≤ v < c0ff6f6da66a7791a32c0234388b1bdc00244917, 6.2 | 95135835519b0ab931c39908b2c99e9fb3c9068b, c0ff6f6da66a7791a32c0234388b1bdc00244917 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.