CVE-2026-80588mptcp: reclaim forward-allocated memory on RX path errors
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming. Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a84164847b1e0a106ebc46821e5d2f9b775c9dc8 before 473f1a5ab2abc98dd9e74b95b9c23c66c47535cc; from 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 before 8277f48a06d3aa1441f6d0b6998ccc0360d30ed8; from 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 before 41b49a8b914ec7dcb03eae93fb27f3c464078644; from 6.18.35 before 6.18.46 | CNA record |
References
- https://git.kernel.org/stable/c/473f1a5ab2abc98dd9e74b95b9c23c66c47535cc
- https://git.kernel.org/stable/c/8277f48a06d3aa1441f6d0b6998ccc0360d30ed8
- https://git.kernel.org/stable/c/41b49a8b914ec7dcb03eae93fb27f3c464078644
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.