Critical 9.8Published May 28, 2026

CVE-2026-46137mptcp: pm: ADD_ADDR rtx: fix potential data-race

Updated under an hour ago (Oct 27, 2026, 7:23 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-362
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Undergoing Analysis
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before d9b272a85fe6b8f993e37915311e4038c814a533; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 23079e0b7742ec114d3507c3e3aad01b7b69e4af; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before b35605e1f1e877038c8c9d499babbc891cdd234f; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 013dcdc1961543b9a3433466bc8c79a2f4ca75b5; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 2ad56e434199ca24a812bb353667aa1c3860f513; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before cc3c0399361efaaf7ae64262eb3f70829b1189c6; from 00cfd77b9063dcdf3628a7087faba60de85a9cc8 before 5cd6e0ad79d2615264f63929f8b457ad97ae550d	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.10 before 5.10.259; from 5.11 before 5.15.210; from 5.16 before 6.1.176; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/d9b272a85fe6b8f993e37915311e4038c814a533	patch
https://git.kernel.org/stable/c/23079e0b7742ec114d3507c3e3aad01b7b69e4af	patch
https://git.kernel.org/stable/c/b35605e1f1e877038c8c9d499babbc891cdd234f	patch
https://git.kernel.org/stable/c/013dcdc1961543b9a3433466bc8c79a2f4ca75b5	patch
https://git.kernel.org/stable/c/6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3	patch
https://git.kernel.org/stable/c/2ad56e434199ca24a812bb353667aa1c3860f513	patch
https://git.kernel.org/stable/c/cc3c0399361efaaf7ae64262eb3f70829b1189c6	patch
https://git.kernel.org/stable/c/5cd6e0ad79d2615264f63929f8b457ad97ae550d	patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.