Lucene search
+L

14 matches found

OSV
OSV
•added 2026/09/25 11:17 a.m.•8 views

DEBIAN-CVE-2026-97566

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the id 0 endpoint. This happens because the id 0 removal path does not te...

5.8AI score0.00198EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/25 10:21 a.m.•10 views

CVE-2026-97566

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the id 0 endpoint. This happens because the id 0 removal path does not te...

5.8AI score0.00198EPSS
SaveExploits0
OSV
OSV
•added 2026/09/25 10:21 a.m.•9 views

CVE-2026-97566 mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the id 0 endpoint. This happens because the id 0 removal path does not te...

5.8AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/09/25 10:21 a.m.•8 views

EUVD-2026-86874

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the id 0 endpoint. This happens because the id 0 removal path does not te...

5.8AI score0.00198EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-97566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: kernel: drop pending ADDADDR when removing ID0 The in-kernel MPTCP path manager can leave a stale ADDADDR announcement entry alive when removing the ...

5.8AI score0.00198EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/29 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-46158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: pm: ADDADDR rtx: always decrease sk refcount When an ADDADDR is retransmitted, the sk is held in skresettimer. It should then be released in all cases at...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/28 10:16 a.m.•12 views

AZL-89091 CVE-2026-46170 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: free sk if last When an ADDADDR is retransmitted, the sk is held in skresettimer, and released at the end. If at that moment, it was the last reference being held, the sk would not be freed. sockput should...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/28 10:16 a.m.•10 views

AZL-88824 CVE-2026-46158 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: always decrease sk refcount When an ADDADDR is retransmitted, the sk is held in skresettimer. It should then be released in all cases at the end. Some unlikely checks were returning directly instead of...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/28 10:16 a.m.•11 views

AZL-88983 CVE-2026-46137 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: fix potential data-race This mptcppmaddtimer helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bhlocksock. If the socket is in use,...

9.8CVSS5.7AI score0.00583EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/28 9:36 a.m.•50 views

CVE-2026-46170 mptcp: pm: ADD_ADDR rtx: free sk if last

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: free sk if last When an ADDADDR is retransmitted, the sk is held in skresettimer, and released at the end. If at that moment, it was the last reference being held, the sk would not be freed. sockput should...

0.00162EPSS
SaveExploits0References8
OSV
OSV
•added 2026/05/28 9:36 a.m.•14 views

CVE-2026-46170 mptcp: pm: ADD_ADDR rtx: free sk if last

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: free sk if last When an ADDADDR is retransmitted, the sk is held in skresettimer, and released at the end. If at that moment, it was the last reference being held, the sk would not be freed. sockput should...

5.8AI score
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•3 views

CVE-2026-46137: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: fix potential data-race This mptcppmaddtimer helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bhlocksock. If the socket is in use,...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•2 views

CVE-2026-46158: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: always decrease sk refcount When an ADDADDR is retransmitted, the sk is held in skresettimer. It should then be released in all cases at the end. Some unlikely checks were returning directly instead of...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•2 views

CVE-2026-46170: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: free sk if last When an ADDADDR is retransmitted, the sk is held in skresettimer, and released at the end. If at that moment, it was the last reference being held, the sk would not be freed. sockput should...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References6
Rows per page
Query Builder