Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-46137

mptcp: pm: ADD_ADDR rtx: fix potential data-race

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < d9b272a85fe6b8f993e37915311e4038c814a533affected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < 23079e0b7742ec114d3507c3e3aad01b7b69e4afaffected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < b35605e1f1e877038c8c9d499babbc891cdd234faffected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < 013dcdc1961543b9a3433466bc8c79a2f4ca75b5affected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < 6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3affected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < 2ad56e434199ca24a812bb353667aa1c3860f513affected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < cc3c0399361efaaf7ae64262eb3f70829b1189c6affected
  • 00cfd77b9063dcdf3628a7087faba60de85a9cc8 to < 5cd6e0ad79d2615264f63929f8b457ad97ae550daffected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References