SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80588

HIGH · CVSS 7.5 EPSS 0.34%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's MultiPath TCP (MPTCP) implementation, where errors in the receive path can lead to unbounded growth of forward-allocated memory due to a failure to reclaim memory when socket buffers (skbs) are dropped. This can result in excessive memory consumption, potentially leading to system instability or denial of service in extreme cases. Organizations using Linux systems with MPTCP should prioritize addressing this issue to mitigate risks associated with memory exhaustion.

CVE
CVE-2026-80588
Severity
HIGH
CVSS
7.5
EPSS
0.34%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec ("mptcp: borrow forward memory from subflow"), errors in the receive path prior to queueing skbs into the receive queue do not trigger forward-allocated memory reclaiming. Prevent forward memory from growing unboundedly in pathological drop scenarios by explicitly reclaiming memory when skbs are dropped.