Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cmf4-rm73-rfhx

Опубликовано: 28 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: ADD_ADDR rtx: fix potential data-race

This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock().

If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: ADD_ADDR rtx: fix potential data-race

This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock().

If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

EPSS

Процентиль: 35%
0.00426
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 9.8
ubuntu
2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

CVSS3: 5.5
redhat
2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

CVSS3: 9.8
nvd
2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

CVSS3: 5.5
msrc
2 месяца назад

mptcp: pm: ADD_ADDR rtx: fix potential data-race

CVSS3: 9.8
debian
2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: m ...

EPSS

Процентиль: 35%
0.00426
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-362