Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46158

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(). It should then be released in all cases at the end. Some (unlikely) checks were returning directly instead of calling sock_put() to decrease the refcount. Jump to a new 'exit' label to call __sock_put() (which will become sock_put() in the next commit) to fix this potential leak. While at it, drop the '
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:271e3315756cfb8dc49e3f939392f603803075dc86de4ae7c1787c1d52bfb5c7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/mptcp/pm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9426265e157dd77ec237c795901ed4dea6d69b5c","status":"affected","version":"00cfd77b9063dcdf3628a7087faba60de85a9cc8","versionType":"git"},{"lessThan":"b41dd76f3b9735096c21d3e799a2b9fe36498d57","status":"affected","version":"00cfd77b9063dcdf3628a7087faba60de85a9cc8","versionType":"git"},{"lessThan":"acd3d3562315c99f3c0db16f0fcc5f0306638982","status":"affected","version":"00cfd77b9063dcdf3628a7087faba60…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/mptcp/pm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.30","versionType":"semver"},{"lessThanOrEqual"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/mptcp/pm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9426265e157dd77ec237c795901ed4dea6d69b5c","status":"affected","version":"00cfd77b9063dcdf3628a7087faba60de85a9cc8","versionType":"git"},{"lessThan":"b41dd76f3b9735096c21d3e799a2b9fe36498d57","status":"affected","version":"00cfd77b9063dcdf3628a7087faba60de85a9cc8","versionType":"git"},{"lessThan":"acd3d3562315c99f3c0db16f0fcc5f0306638982","status":"affected","version":"00cfd77b9063dcdf3628a7087faba60…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/mptcp/pm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.30","versionType":"semver"},{"lessThanOrEqual"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/25e37407442b8766ec2cf52fb4e31b5c3d3aeeae"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9426265e157dd77ec237c795901ed4dea6d69b5c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9634cb35af17019baec21ca648516ce376fa10e6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/acd3d3562315c99f3c0db16f0fcc5f0306638982"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b41dd76f3b9735096c21d3e799a2b9fe36498d57"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a1163a43071ea6ccbe038f74675b1e03a715812f8da4101fa9b6f9d947c8dc28 · sha256:359bb9e0bfb5cc21… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer