9.8

CVE-2026-46137: linux Race Condition

CVSS: 9.8v3.1CriticalUndergoing analysis
AliasesUBUNTU-CVE-2026-46137DEBIAN-CVE-2026-46137
Published 28-05-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-46137 is a critical (CVSS 9.8) Race Condition vulnerability in linux. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 39.9% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
0.48%
0%100%
Low · +0.05 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 52 · Related 52
OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1

Timeline

  1. 28-05-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADD_ADDR rtx: fix potential data-race This mptcp_pm_add_timer() helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bh_lock_sock(). If the socket is in use, retry again soon after, similar to what is done with the keepalive timer.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.48%

Chance of exploitation in the next 30 days

Percentile

40%

Versus all other CVEs

30-day change

+0.05 pp

From 0.43% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu151 products
  • linux< 5.15.0-186.196 | < 6.8.0-136.136 | All versions (No fix recorded) | < 7.0.0-27.27
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1112.119 | < 6.8.0-1061.64 | All versions (No fix recorded) | < 7.0.0-1008.8
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < d9b272a85fe6b8f993e37915311e4038c814a533 | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < 23079e0b7742ec114d3507c3e3aad01b7b69e4af | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < b35605e1f1e877038c8c9d499babbc891cdd234f | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < 013dcdc1961543b9a3433466bc8c79a2f4ca75b5 | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < 6e4710d7d8782cb61af29a7e7111ddfc38b9e1a3 | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < 2ad56e434199ca24a812bb353667aa1c3860f513 | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < cc3c0399361efaaf7ae64262eb3f70829b1189c6 | ≥ 00cfd77b9063dcdf3628a7087faba60de85a9cc8, < 5cd6e0ad79d2615264f63929f8b457ad97ae550d | 5.10
  • linux_kernel≥ 5.10, < 5.10.259 | ≥ 5.11, < 5.15.210 | ≥ 5.16, < 6.1.176 | ≥ 6.2, < 6.6.141 | ≥ 6.7, < 6.12.91 | ≥ 6.13, < 6.18.30 | ≥ 6.19, < 7.0.7 | 7.1:rc1 | 7.1:rc2
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.7-1

3 vendors · 154 products

References

53 links
Show all 53 references