All vulnerabilities
CVE-2026-97567

Linux: mptcp: prevent race between disconnect() and rtx

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in75b3b30ae4ee6aa0572595f6b48544ed4f479eb6Also 2261f857ef4e0d21eb1a8b47b06640cf7ab16d3e, 374da2b9be1280695ce41f108334a8f16e3e54be and 2 moreCVE List
Published25 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 75b3b30ae4ee6aa0572595f6b48544ed4f479eb6LinuxCVE List
  • 2261f857ef4e0d21eb1a8b47b06640cf7ab16d3eLinuxCVE List
  • 374da2b9be1280695ce41f108334a8f16e3e54beLinuxCVE List
  • 69a7b2a912672159dda7dcf325d27752d448dfdfLinuxCVE List
  • 85c580b0d8590520ae00a15c29e9fb9c99427a3eLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: prevent race between disconnect() and rtx

Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous timer stop operation.

Text from CVE List

Affected versions 12

  • Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 75b3b30ae4ee6aa0572595f6b48544ed4f479eb6CVE List
  • Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 2261f857ef4e0d21eb1a8b47b06640cf7ab16d3eCVE List
  • Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 374da2b9be1280695ce41f108334a8f16e3e54beCVE List
  • Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 69a7b2a912672159dda7dcf325d27752d448dfdfCVE List
  • Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 85c580b0d8590520ae00a15c29e9fb9c99427a3eCVE List
  • Linuxaffected: 5.17CVE List
  • Linuxunaffected: all versions before 5.17CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5