CVE-2026-80588

7.5 Élevée

Publiée le 26/08/2026 à 17:17 · Modifiée le 16/10/2026 à 22:18 · Reçue · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming. Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.

Traduire en français

Produits concernés

Linux

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Références

https://git.kernel.org/stable/c/41b49a8b914ec7dcb03eae93fb27f3c464078644
https://git.kernel.org/stable/c/473f1a5ab2abc98dd9e74b95b9c23c66c47535cc
https://git.kernel.org/stable/c/8277f48a06d3aa1441f6d0b6998ccc0360d30ed8

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories