CVE-2026-97567
Linux: mptcp: prevent race between disconnect() and rtx
CVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in75b3b30ae4ee6aa0572595f6b48544ed4f479eb6Also 2261f857ef4e0d21eb1a8b47b06640cf7ab16d3e, 374da2b9be1280695ce41f108334a8f16e3e54be and 2 moreCVE List
What fixes it
- 75b3b30ae4ee6aa0572595f6b48544ed4f479eb6LinuxCVE List
- 2261f857ef4e0d21eb1a8b47b06640cf7ab16d3eLinuxCVE List
- 374da2b9be1280695ce41f108334a8f16e3e54beLinuxCVE List
- 69a7b2a912672159dda7dcf325d27752d448dfdfLinuxCVE List
- 85c580b0d8590520ae00a15c29e9fb9c99427a3eLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
mptcp: prevent race between disconnect() and rtx
Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous timer stop operation.
Text from CVE List
Affected versions 12
- Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 75b3b30ae4ee6aa0572595f6b48544ed4f479eb6CVE List
- Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 2261f857ef4e0d21eb1a8b47b06640cf7ab16d3eCVE List
- Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 374da2b9be1280695ce41f108334a8f16e3e54beCVE List
- Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 69a7b2a912672159dda7dcf325d27752d448dfdfCVE List
- Linuxaffected: b29fcfb54cd70caca5b11c80d8d238854938884a before 85c580b0d8590520ae00a15c29e9fb9c99427a3eCVE List
- Linuxaffected: 5.17CVE List
- Linuxunaffected: all versions before 5.17CVE List
- Linuxunaffected: 6.6.160 through 6.6.*CVE List
- Linuxunaffected: 6.12.113 through 6.12.*CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 5
- git.kernel.org/stable/c/75b3b30ae4ee6aa0572595f6b48544ed4f479eb6Referencevia CVE List
- git.kernel.org/stable/c/2261f857ef4e0d21eb1a8b47b06640cf7ab16d3eReferencevia CVE List
- git.kernel.org/stable/c/374da2b9be1280695ce41f108334a8f16e3e54beReferencevia CVE List
- git.kernel.org/stable/c/69a7b2a912672159dda7dcf325d27752d448dfdfReferencevia CVE List
- git.kernel.org/stable/c/85c580b0d8590520ae00a15c29e9fb9c99427a3eReferencevia CVE List