CVE-2025-68221: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr Fix inverted WARN_ON_ONCE condition that prevented normal address removal counter updates. The current code only executes decrement logic when the counter is already 0 (abnormal state), while normal removals (counter > 0) are ignored.

Affected products

• Linux Linux: from 6.15, before 6.17.10 (fixed in 6.17.10)

Published 2025-12-16. Last modified 2026-06-17.