CVE-2026-46170

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: free sk if last When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(), and released at the end. If at that moment, it was the last reference being held, the sk would not be freed. sock_put() should then be called instead of __sock_put(). But that's not enough: if it is the last reference, sock_put() will call sk_free(), which will end up calling sk_stop_timer_sync() on the same timer, and waiting indefinitely to finish. So it is needed to mark that the timer is done at the end of the timer handler when it has not been rescheduled, not to call sk_stop_timer_sync() on "itself".

• https://git.kernel.org/stable/c/531c537b8fb620beabccfb1594e8d43cbebbb87aPatch
• https://git.kernel.org/stable/c/6a3af482188f6db4186d1605f64d911d7330abb3Patch
• https://git.kernel.org/stable/c/8143a224785ceaf2b0856e08d4498916f38228fbPatch
• https://git.kernel.org/stable/c/b74ad20198652b6b39a761c277ba65ae82b1e107Patch
• https://git.kernel.org/stable/c/b7b9a461569734d33d3259d58d2507adfac107edPatch

Published

May 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46165In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46166In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-46167In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46168In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46169In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-4617A weakness has been identified in SourceCodester Patients Wa…7.3
• CVE-2026-46171In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46172In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46173In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46174In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-46175In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46176In the Linux kernel, the following vulnerability has been re…7.8