CVE-2025-71088

CVE-2025-71088 is a vulnerability in the Linux kernel's MPTCP implementation, specifically affecting the handling of simultaneous connection attempts. It allows a race condition during simultaneous connection establishment to bypass MPTCP fallback checks, leading to an inconsistent socket state and potential system crashes. The vulnerability has a FAUCET Risk Score of 39/100, indicating a moderate severity. While a direct attack vector and complexity are not explicitly detailed, the potential impact is a denial of service due to system instability. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. However, the vulnerability has garnered significant community attention with 11 mentions and one media article, suggesting awareness and discussion within the cybersecurity community.