THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-46170 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: free sk if last When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(), and released at the end. If at that moment, it was the last reference being held, the sk would no

[NVD] CVE-2026-46170 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: free sk if last When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(), and released at the end. If at that moment, it was the last reference being held, the sk would no

lownvdPublished 2026-05-28

CVE-2026-46170 CVSS: 5.5 MEDIUM Published: 2026-05-28T10:16:32.650

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: ADD_ADDR rtx: free sk if last

When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(), and released at the end.

If at that moment, it was the last reference being held, the sk would not be freed. sock_put() should then be called instead

Indicators of compromise

CVE-2026-46170cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-46170