Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-97523

mptcp: close race between scheduler and state change

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.222, 5.20, 6.1.189, 6.6.158, 6.12.111, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mss_now reset to 0 for a divide operation. Address the issue by explicitly checking for the critical scenario.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From fb9c73ef2ac2ec816efdc8b9267bc04e1369c20b · fixed in d74b2e26b54a7dae1d87c1f19ae0d6db500e5e03; From c886d70286bf3ad411eb3d689328a67f7102c6ae · fixed in 5883ae880f51edc4b1484e787473b865b6159ead; From c886d70286bf3ad411eb3d689328a67f7102c6ae · fixed in 0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0; From c886d70286bf3ad411eb3d689328a67f7102c6ae · fixed in 8f11430d51ff8365bc51b670bc3002b65ae4c6b7; From c886d70286bf3ad411eb3d689328a67f7102c6ae · fixed in a09c87abf10a0a7e203137c75b5381aa63d9b31d; From c886d70286bf3ad411eb3d689328a67f7102c6ae · fixed in 4c856f3c151a2f3fa237caa651c44015916ca584; From c886d70286bf3ad411eb3d689328a67f7102c6ae · fixed in 42064de57fb83231fcc89663a94885f228a1ee53; From 5.15.190 · fixed in 5.15.222; From 5.19.4 · fixed in 5.20

  • Linux Linux

    6.0

  • KernelLinux

    fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.0.0 · fixed in 6.6.158; From 6.2.0 · fixed in 6.12.111; From 6.7.0 · fixed in 6.18.53; From 6.13.0 · fixed in 7.2.7

References 7

git.kernel.org