CVE-2026-46137 mptcp: pm: ADD_ADDR rtx: fix potential data-race

🗓️ 28 May 2026 09:35:53Reported by LinuxType

Fixed data race in mptcp ADD_ADDR retry timer by using bh_lock_sock and retrying when socket is busy.

Reporter	Title	Published	Views	Family All 16
CNNVD	Linux kernel 安全漏洞	28 May 202600:00	–	cnnvd
CVE	CVE-2026-46137	28 May 202609:35	–	cve
Debian CVE	CVE-2026-46137	28 May 202609:35	–	debiancve
EUVD	EUVD-2026-32764	28 May 202609:35	–	euvd
NVD	CVE-2026-46137	28 May 202610:16	–	nvd
OSV	BELL-CVE-2026-46137	29 May 202606:09	–	osv
OSV	DEBIAN-CVE-2026-46137	28 May 202610:16	–	osv
OSV	ROOT-OS-DEBIAN-11-CVE-2026-46137 CVE-2026-46137 in rootio-linux - Patched by Root	31 May 202603:58	–	osv
OSV	ROOT-OS-DEBIAN-12-CVE-2026-46137 CVE-2026-46137 in rootio-linux - Patched by Root	2 Jun 202604:12	–	osv
OSV	ROOT-OS-DEBIAN-13-CVE-2026-46137 CVE-2026-46137 in rootio-linux - Patched by Root	2 Jun 202604:18	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mptcp/pm.c"
    ],
    "versions": [
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "013dcdc1961543b9a3433466bc8c79a2f4ca75b5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "2ad56e434199ca24a812bb353667aa1c3860f513",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "cc3c0399361efaaf7ae64262eb3f70829b1189c6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "5cd6e0ad79d2615264f63929f8b457ad97ae550d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mptcp/pm.c"
    ],
    "versions": [
      {
        "version": "5.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.10",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.141",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.91",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.30",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.7",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1-rc3",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3
git	www.git.kernel.org/stable/c/5cd6e0ad79d2615264f63929f8b457ad97ae550d
git	www.git.kernel.org/stable/c/013dcdc1961543b9a3433466bc8c79a2f4ca75b5
git	www.git.kernel.org/stable/c/2ad56e434199ca24a812bb353667aa1c3860f513
git	www.git.kernel.org/stable/c/cc3c0399361efaaf7ae64262eb3f70829b1189c6

30 May 2026 10:48Current

CVSS 3.19.8

EPSS0.00046