CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race
In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: ADDADDR rtx: fix potential data-race
This mptcppmaddtimer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bhlocksock().
If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46137?
The severity of CVE-2026-46137 is critical with a CVSS score of 9.8.
How do I fix CVE-2026-46137?
To fix CVE-2026-46137, ensure that the socket lock is held with bh_lock_sock() within the mptcp_pm_add_timer() function.
What is the impact of CVE-2026-46137?
CVE-2026-46137 can lead to potential data races in the Linux kernel's multipath TCP handling.
Which software is affected by CVE-2026-46137?
CVE-2026-46137 affects the Linux kernel and the Microsoft azl3 kernel version 6.6.139.1-1.
When was CVE-2026-46137 published?
CVE-2026-46137 was published on May 28, 2026.