Riskcovery

CVE-2026-80588

mptcp: reclaim forward-allocated memory on RX path errors

State
Published
Severity
7.5 High
Published
Aug 26, 2026
Updated
Oct 16, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: reclaim forward-allocated memory on RX path errors

After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming.

Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a84164847b1e0a106ebc46821e5d2f9b775c9dc8 to before 473f1a5ab2abc98dd9e74b95b9c23c66c47535ccAffected
  • 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 to before 8277f48a06d3aa1441f6d0b6998ccc0360d30ed8Affected
  • 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 to before 41b49a8b914ec7dcb03eae93fb27f3c464078644Affected
  • 6.18.35 to before 6.18.46Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.