---
cve: "CVE-2026-46137"
severity: "CRITICAL"
cvss: 9.8
epss: "43%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-05-28 10:16:29"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T06:32:13+02:00"
---

# CVE-2026-46137

> 9.8 CRITICAL

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: ADD_ADDR rtx: fix potential data-race

This mptcp_pm_add_timer() helper is executed as a timer callback in
softirq context. To avoid any data races, the socket lock needs to be
held with bh_lock_sock().

If the socket is in use, retry again soon after, similar to what is done
with the keepalive timer.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- Kernel ≥ 5.10.259
- Kernel ≥ 5.15.210
- Kernel ≥ 6.1.176
- Kernel ≥ 6.6.141
- Kernel ≥ 6.12.91
- Kernel ≥ 6.18.30
- Kernel ≥ 7.0.7

## Referenzen

- <https://git.kernel.org/stable/c/d9b272a85fe6b8f993e37915311e4038c814a533>
- <https://git.kernel.org/stable/c/23079e0b7742ec114d3507c3e3aad01b7b69e4af>
- <https://git.kernel.org/stable/c/b35605e1f1e877038c8c9d499babbc891cdd234f>
- <https://git.kernel.org/stable/c/013dcdc1961543b9a3433466bc8c79a2f4ca75b5>
- <https://git.kernel.org/stable/c/6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3>
- <https://git.kernel.org/stable/c/2ad56e434199ca24a812bb353667aa1c3860f513>
- <https://git.kernel.org/stable/c/cc3c0399361efaaf7ae64262eb3f70829b1189c6>
- <https://git.kernel.org/stable/c/5cd6e0ad79d2615264f63929f8b457ad97ae550d>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-46137) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_