Riskcovery

CVE-2026-97522

mptcp: fix bad accounting in __mptcp_subflow_push_pending()

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix bad accounting in __mptcp_subflow_push_pending()

If __subflow_push_pending() errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0fa1b3783a17d75a4aa1651a18ede041ffca5750 to before ddbf9f03c1cc7d5b86eebe7c2beea0db4286d354Affected
  • 0fa1b3783a17d75a4aa1651a18ede041ffca5750 to before 9781fa35d9f7a87a83115acd3a88bc9ce35b5407Affected
  • 0fa1b3783a17d75a4aa1651a18ede041ffca5750 to before a0a64525f3414268ed4b1945a1dc690aa974dd4fAffected
  • 0fa1b3783a17d75a4aa1651a18ede041ffca5750 to before dc054821e639a2e14f1419436612db70b6af45fcAffected
  • 0fa1b3783a17d75a4aa1651a18ede041ffca5750 to before f3ef03357396d4b147d8e76c75fb612c2f264ffcAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.