Back to CVE records
Not yet scoredPublished Sep 25, 2026
CVE-2026-97522mptcp: fix bad accounting in __mptcp_subflow_push_pending()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in __mptcp_subflow_push_pending() If __subflow_push_pending() errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0fa1b3783a17d75a4aa1651a18ede041ffca5750 before ddbf9f03c1cc7d5b86eebe7c2beea0db4286d354; from 0fa1b3783a17d75a4aa1651a18ede041ffca5750 before 9781fa35d9f7a87a83115acd3a88bc9ce35b5407; from 0fa1b3783a17d75a4aa1651a18ede041ffca5750 before a0a64525f3414268ed4b1945a1dc690aa974dd4f; from 0fa1b3783a17d75a4aa1651a18ede041ffca5750 before dc054821e639a2e14f1419436612db70b6af45fc; from 0fa1b3783a17d75a4aa1651a18ede041ffca5750 before f3ef03357396d4b147d8e76c75fb612c2f264ffc | CNA record |
References
- https://git.kernel.org/stable/c/ddbf9f03c1cc7d5b86eebe7c2beea0db4286d354
- https://git.kernel.org/stable/c/9781fa35d9f7a87a83115acd3a88bc9ce35b5407
- https://git.kernel.org/stable/c/a0a64525f3414268ed4b1945a1dc690aa974dd4f
- https://git.kernel.org/stable/c/dc054821e639a2e14f1419436612db70b6af45fc
- https://git.kernel.org/stable/c/f3ef03357396d4b147d8e76c75fb612c2f264ffc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.