This is a note to let you know that I've just added the patch titled mptcp: fix uninit-value in mptcp_incoming_options to the 5.10-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: mptcp-fix-uninit-value-in-mptcp_incoming_options.patch and it can be found in the queue-5.10 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. commit a413aecedb00145cfe779c16b5d24da31911d68e Author: Edward Adam Davis <eadavis@xxxxxx> Date: Thu Nov 23 09:23:39 2023 +0800 mptcp: fix uninit-value in mptcp_incoming_options [ Upstream commit 237ff253f2d4f6307b7b20434d7cbcc67693298b ] Added initialization use_ack to mptcp_parse_option(). Reported-by: syzbot+b834a6b2decad004cfa1@xxxxxxxxxxxxxxxxxxxxxxxxx Signed-off-by: Edward Adam Davis <eadavis@xxxxxx> Acked-by: Paolo Abeni <pabeni@xxxxxxxxxx> Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx> Signed-off-by: Sasha Levin <sashal@xxxxxxxxxx> diff --git a/net/mptcp/options.c b/net/mptcp/options.c index 64afe71e2129..c389d7e47135 100644 --- a/net/mptcp/options.c +++ b/net/mptcp/options.c @@ -92,6 +92,7 @@ static void mptcp_parse_option(const struct sk_buff *skb, mp_opt->dss = 1; mp_opt->use_map = 1; mp_opt->mpc_map = 1; + mp_opt->use_ack = 0; mp_opt->data_len = get_unaligned_be16(ptr); ptr += 2; }