CVE-2026-46170 mptcp: pm: ADD_ADDR rtx: free sk if last

🗓️ 28 May 2026 09:36:25Reported by LinuxType

Linux kernel mptcp ADD_ADDR retransmit could leak sk reference; use sock_put and mark timer done to avoid deadlock.

Reporter	Title	Published	Views	Family All 177
ATTACKERKB	CVE-2026-46170	28 May 202609:36	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1754)	27 May 202600:00	–	nessus
Tenable Nessus	Debian dsa-6355 : ata-modules-6.12.90+deb13-armmp-di - security update	21 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-46170	29 May 202600:00	–	nessus
CNNVD	Linux kernel 安全漏洞	28 May 202600:00	–	cnnvd
CVE	CVE-2026-46170	28 May 202609:36	–	cve
Debian	[SECURITY] [DSA 6355-1] linux security update	21 Jun 202608:15	–	debian
Debian CVE	CVE-2026-46170	28 May 202609:36	–	debiancve
EUVD	EUVD-2026-32797	28 May 202609:36	–	euvd
NVD	CVE-2026-46170	28 May 202610:16	–	nvd

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mptcp/pm.c"
    ],
    "versions": [
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "6a3af482188f6db4186d1605f64d911d7330abb3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "531c537b8fb620beabccfb1594e8d43cbebbb87a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "b74ad20198652b6b39a761c277ba65ae82b1e107",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "8143a224785ceaf2b0856e08d4498916f38228fb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8",
        "lessThan": "b7b9a461569734d33d3259d58d2507adfac107ed",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mptcp/pm.c"
    ],
    "versions": [
      {
        "version": "5.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.10",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.142",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.92",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.30",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.7",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/6a3af482188f6db4186d1605f64d911d7330abb3
git	www.git.kernel.org/stable/c/8143a224785ceaf2b0856e08d4498916f38228fb
git	www.git.kernel.org/stable/c/531c537b8fb620beabccfb1594e8d43cbebbb87a
git	www.git.kernel.org/stable/c/b7b9a461569734d33d3259d58d2507adfac107ed
git	www.git.kernel.org/stable/c/b74ad20198652b6b39a761c277ba65ae82b1e107

14 Jun 2026 17:59Current

EPSS0.00127