CVE-2026-80588

High

Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming. Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux
PublishedAug 26, 2026
First seenAug 26, 2026

How to fix

Update
  • Linux Linux473f1a5ab2abc98dd9e74b95b9c23c66c47535cc, 8277f48a06d3aa1441f6d0b6998ccc0360d30ed8, 41b49a8b914ec7dcb03eae93fb27f3c464078644, 6.18.46 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxa84164847b1e0a106ebc46821e5d2f9b775c9dc8 ≤ v < 473f1a5ab2abc98dd9e74b95b9c23c66c47535cc, 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 ≤ v < 8277f48a06d3aa1441f6d0b6998ccc0360d30ed8, 9db5b3cec4ec1c0cd3239689f5c8653d691a1754 ≤ v < 41b49a8b914ec7dcb03eae93fb27f3c464078644, 6.18.35 ≤ v < 6.18.46, 6.19473f1a5ab2abc98dd9e74b95b9c23c66c47535cc, 8277f48a06d3aa1441f6d0b6998ccc0360d30ed8, 41b49a8b914ec7dcb03eae93fb27f3c464078644, 6.18.46

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80588 · Linux · Dark Radar