Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - mptcp pm核心內一律將 signal+subflow endp 標記為已使用 Syzkaller 設法找到產生此警告的動作組合 msk->pm.local_addr_used == 0 警告net/mptcp/pm_kernel.c __mark_subflow_endp_available net/mptcp/pm_kernel.c:1071 的 1071 [內嵌]、 CPU#1syz.2.17/961 警告
    net/mptcp/pm_kernel.c:1071 at mptcp_nl_remove_subflow_and_signal_addr net/mptcp/pm_kernel.c:1103 [內嵌] CPU#1syz.2.17/961 警告 net/mptcp/pm_kernel.c:1071 at mptcp_pm_nl_del_addr_doit+0x81d/0x8f0 net /mptcp/pm_kernel.c:1210、 CPU#1syz.2.17/961 模組連結於 CPU1 UID0 PID961 Commsyz.2.17 未受污染的 6.19.0-08368-gfafda3b4b06b #22 PREEMPT(full)硬體名稱QEMU Ubuntu 25.10 PC v2 (i440FX + PIIX, + 10.1 機器, 1996)BIOS 1.17.0-debian-1.17.0-1build1 2014 年 4 月 1 日 RIP
    0010:__mark_subflow_endp_available net/mptcp/pm_kernel.c:1071 [內嵌] RIP
    0010mptcp_nl_remove_subflow_and_signal_addr net/mptcp/pm_kernel.c:1103 [內嵌] RIP
    0010:mptcp_pm_nl_del_addr_doit+0x81d/0x8f0 net/mptcp/pm_kernel.c:1210 程式碼89 c5 e8 46 30 6f fe e9 21 fd ff 49 83 ed 80 e8 38 30 6f fe 4c 89 ef be 03 00 00 0 9 9 db4 df fe eb ac e8 24 30 6f fe 90 <0f> 0b 90 e9 1d ff ff ff e8 16 30 6f fe eb 05 e8 0f 30 6f fe e8 9a RSP0018:ffffc90001663880 EFLAGS00010293 RAX
    ffffffff82de1a6c RBX: 0000000000000000 RCX: ffff88800722b500 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8880158b22d0 R08: 0000000000010425 R09: ffffffffffffffff R10:
     R11ffffffff82de18ba  : 0000000000000000 R12: ffff88800641a640 R13: ffff8880158b1880 R14: ffff88801ec3c900 R15: ffff88800641a650 FS: 00005555722c3500(0000) GS:ffff8880f909d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f66346e0f60 CR3: 000000001607c000 CR4: 0000000000350ef0 Call Trace: <TASK> genl_family_rcv_msg_doit+0x117/0x180 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x3a8/0x3f0 net/netlink/genetlink. c:1210 netlink_rcv_skb+0x16d/0x240 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [內嵌] netlink_unicast+0x3e9/0x4c0 網路/netlink/af_netlink.c:1344 netlink_sendmsg+0x4aa/0x5b0 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:727 [內嵌] __sock_sendmsg+0xc9/0xf0 net/socket.c:742____sys_sendmsg+0x272/0x3b0 net/socket.c:2592 __sys_sendmsg+0x2de/0x320 net/socket.c:2646 __sys_sendmsg net/socket.c: 2678 [內嵌]
    __do_sys_sendmsg net/socket.c:2683 [內嵌] __se_sys_sendmsg net/socket.c:2681 [內嵌]
    __x64_sys_sendmsg+0x110/0x1a0 net/socket.c:2681 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [內嵌] do_syscall_64+0x143/0x440 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0xRIP7f
    0033:0x7f66346f826d 程式碼ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 0c <48> ] 2 4 0 4c 8b 0c 5c 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP002b:00007ffc83d8bdc8 EFLAGS00000246 ORIG_RAX000000000000002e RAXffffffffffffffda RBX
    00007f6634985fa0 RCX: 00007f66346f826d RDX: 00000000040000b0 RSI: 0000200000000740 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11:
    0000000000000246 R1200007f6634985fa8 R1300007f6634985fac R140000000000000000 R150000000000001770 </TASK> 造成 的動作似乎為- 將 MPTCP 子流程限制設為 0' 和 'TCPsubflow' 訊號端點「旗標 - 從不同位址建立新的 MPTCP 連線將傳送連結至 MPTCP 端點的 ADD_ADDR ('signal' 旗標)但不會初始化任何子流程 ('subflow' 旗標) - 移除 MPTCP 端點 ---truncated--- (CVE-2026-23321)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

偵測

Linux Distros 未修補的弱點：CVE-2026-23321

medium Nessus Plugin ID 303728

版本 1.4