PT-2026-44293 · Linux · Linux
Published
2026-05-28
·
Updated
2026-05-28
·
CVE-2026-46170
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: ADD ADDR rtx: free sk if last
When an ADD ADDR is retransmitted, the sk is held in sk reset timer(),
and released at the end.
If at that moment, it was the last reference being held, the sk would
not be freed. sock put() should then be called instead of sock put().
But that's not enough: if it is the last reference, sock put() will call
sk free(), which will end up calling sk stop timer sync() on the same
timer, and waiting indefinitely to finish. So it is needed to mark that
the timer is done at the end of the timer handler when it has not been
rescheduled, not to call sk stop timer sync() on "itself".
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux