CVE-2026-80586Patch

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some fields written, which could lead to inconsistency or access uninitialized data. Explicitly reset the fields that could have been modified in case of unexpected size.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-08-27)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-26: 1Mentions · 2026-08-27: 2Patch / Workaround · 2026-08-27: 2Technical Details · 2026-08-27: 208-2608-27
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-261
General1
2026-08-272
Patch2
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-80586 Linux Kernel MPTCP Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-80586

    Post summary

    The brief excerpt references CVE‑2026‑80586 as a Linux Kernel MPTCP vulnerability and points to a detail page, but offers no technical, exploit, or patch information.

    00001101
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-80586 In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed… https://www.cve.org/CVERecord?id=CVE-2026-80586 ----- Traducción: CVE-2026-80586 En … https://infoflow.cloud`

    Post summary

    CVE-2026-80586 has been patched in the Linux kernel; no PoC or active exploitation is reported.

    0000036
    102 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-80586 In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed… https://www.cve.org/CVERecord?id=CVE-2026-80586

    Post summary

    The notice announces that CVE-2026-80586, affecting MPTCP in the Linux kernel, has been resolved with a patch that resets DSS fields; no exploit or PoC details are provided.

    00000692
    58.0K followersView on X

Explore more