7.5

CVE-2026-97523

mptcp: close race between scheduler and state change

In the Linux kernel, the following vulnerability has been resolved:

mptcp: close race between scheduler and state change

The mptcp scheduler may race with subflow sockets state change: data
transmission on the selected socket may fail and a later release could
try to use mss_now reset to 0 for a divide operation.

Address the issue by explicitly checking for the critical scenario.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fb9c73ef2ac2ec816efdc8b9267bc04e1369c20b
Version < d74b2e26b54a7dae1d87c1f19ae0d6db500e5e03
Status affected
Version c886d70286bf3ad411eb3d689328a67f7102c6ae
Version < 5883ae880f51edc4b1484e787473b865b6159ead
Status affected
Version c886d70286bf3ad411eb3d689328a67f7102c6ae
Version < 0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0
Status affected
Version c886d70286bf3ad411eb3d689328a67f7102c6ae
Version < 8f11430d51ff8365bc51b670bc3002b65ae4c6b7
Status affected
Version c886d70286bf3ad411eb3d689328a67f7102c6ae
Version < a09c87abf10a0a7e203137c75b5381aa63d9b31d
Status affected
Version c886d70286bf3ad411eb3d689328a67f7102c6ae
Version < 4c856f3c151a2f3fa237caa651c44015916ca584
Status affected
Version c886d70286bf3ad411eb3d689328a67f7102c6ae
Version < 42064de57fb83231fcc89663a94885f228a1ee53
Status affected
Version 8caf5c15b5288d52d9c89374d6c10fa32ee84ec5
Status affected
Version 5.15.190
Version < 5.15.222
Status affected
Version 5.19.4
Version < 5.20
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.0
Status affected
Version 0
Version < 6.0
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.467
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/8f11430d51ff8365bc51b670bc3002b65ae4c6b7
https://git.kernel.org/stable/c/a09c87abf10a0a7e203137c75b5381aa63d9b31d
https://git.kernel.org/stable/c/4c856f3c151a2f3fa237caa651c44015916ca584
https://git.kernel.org/stable/c/42064de57fb83231fcc89663a94885f228a1ee53
https://git.kernel.org/stable/c/0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0
https://git.kernel.org/stable/c/5883ae880f51edc4b1484e787473b865b6159ead
https://git.kernel.org/stable/c/d74b2e26b54a7dae1d87c1f19ae0d6db500e5e03