UnratedFix available
mptcp: fix scheduling with atomic in timestamp sockopt
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using lock_sock_fast() (atomic context) around sock_set_timestamp() and sock_set_timestamping() is unsafe, as both helpers can sleep. Replace lock_sock_fast() with sleepable lock_sock()/release_sock() to avoid scheduling while atomic panic.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.15.209, 6.1.175, 6.12.88, 6.18.30, 6.6.140, 7.0.7
- CVEs
- CVE-2026-46168
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 02:02 UTC · Revision 1
Source evidence
mptcp: fix scheduling with atomic in timestamp sockopt
core-osv · Original sourcePublished 28 May 2026, 09:36 UTC
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using lock_sock_fast() (atomic context) around sock_set_timestamp() and sock_set_timestamping() is unsafe, as both helpers can sleep. Replace lock_sock_fast() with sleepable lock_sock()/release_sock() to avoid scheduling while atomic panic.
osv:CVE-2026-46168
Kernel
Fixed versions: 5.15.209, 6.1.175, 6.6.140, 6.12.88, 6.18.30, 7.0.7
Complete source record
{
"id": "aea9c1b4c7fd8ad176784c93152b20391a8ac7767fbce03de066ad9cf248bb7d",
"url": "https://osv.dev/vulnerability/CVE-2026-46168",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "mptcp: fix scheduling with atomic in timestamp sockopt",
"summary": "In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using lock_sock_fast() (atomic context) around sock_set_timestamp() and sock_set_timestamping() is unsafe, as both helpers can sleep. Replace lock_sock_fast() with sleepable lock_sock()/release_sock() to avoid scheduling while atomic panic.",
"evidence": "osv:CVE-2026-46168",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.15.209",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.175",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.140",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.88",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.30",
"evidence": "/affected/1/ranges"
},
{
"value": "7.0.7",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-46168",
"aliases": [
"CVE-2026-46168"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "9061f24bf82ec2e92dd1e7c10b98b680db023d31"
},
{
"fixed": "0949d8bbbedbafe0136a1723c41eb823c2f1e09d"
},
{
"fixed": "e792cfb6aeaf65612cdf8e3ac431d65e66283654"
},
{
"fixed": "ebeb70e29e37cfce899309cc2665a3bfe960ed94"
},
{
"fixed": "b157dab93a7af44a84e78cf0cb311dde475cff5b"
},
{
"fixed": "8a005fe451c73fd2b3d1faa5643c11e6bd07acfc"
},
{
"fixed": "7eb513b42721bee4b96da69f6188d5a7783f210d"
},
{
"fixed": "b5c52908d52c6c8eb8933264aa6087a0600fd892"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46168.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.14.0"
},
{
"fixed": "5.15.209"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.175"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.140"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.88"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.30"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.0.7"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46168.json"
}
}
],
"modified": "2026-10-28T02:30:25.130742106Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-784472.html",
"https://git.kernel.org/stable/c/0949d8bbbedbafe0136a1723c41eb823c2f1e09d",
"https://git.kernel.org/stable/c/7eb513b42721bee4b96da69f6188d5a7783f210d",
"https://git.kernel.org/stable/c/8a005fe451c73fd2b3d1faa5643c11e6bd07acfc",
"https://git.kernel.org/stable/c/b157dab93a7af44a84e78cf0cb311dde475cff5b",
"https://git.kernel.org/stable/c/b5c52908d52c6c8eb8933264aa6087a0600fd892",
"https://git.kernel.org/stable/c/e792cfb6aeaf65612cdf8e3ac431d65e66283654",
"https://git.kernel.org/stable/c/ebeb70e29e37cfce899309cc2665a3bfe960ed94",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46168.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46168",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46168.json"
}
},
"related_cves": [
{
"value": "CVE-2026-46168",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 491762,
"published_at": "2026-05-28T09:36:23.394+00:00"
}