Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-46137

mptcp: pm: ADD_ADDR rtx: fix potential data-race

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.141, 6.12.91, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in d9b272a85fe6b8f993e37915311e4038c814a533; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in 23079e0b7742ec114d3507c3e3aad01b7b69e4af; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in b35605e1f1e877038c8c9d499babbc891cdd234f; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in 013dcdc1961543b9a3433466bc8c79a2f4ca75b5; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in 6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in 2ad56e434199ca24a812bb353667aa1c3860f513; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in cc3c0399361efaaf7ae64262eb3f70829b1189c6; From 00cfd77b9063dcdf3628a7087faba60de85a9cc8 · fixed in 5cd6e0ad79d2615264f63929f8b457ad97ae550d

  • Linux Linux

    5.10

  • KernelLinux

    From 5.10.0 · fixed in 5.10.259; From 5.11.0 · fixed in 5.15.210; From 5.16.0 · fixed in 6.1.176; From 6.2.0 · fixed in 6.6.141; From 6.7.0 · fixed in 6.12.91; From 6.13.0 · fixed in 6.18.30; From 6.19.0 · fixed in 7.0.7

References 8

git.kernel.org