CVE-2026-46170

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mptcp: pm: ADD_ADDR rtx: free sk if last<br /> <br /> When an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(),<br /> and released at the end.<br /> <br /> If at that moment, it was the last reference being held, the sk would<br /> not be freed. sock_put() should then be called instead of __sock_put().<br /> <br /> But that&amp;#39;s not enough: if it is the last reference, sock_put() will call<br /> sk_free(), which will end up calling sk_stop_timer_sync() on the same<br /> timer, and waiting indefinitely to finish. So it is needed to mark that<br /> the timer is done at the end of the timer handler when it has not been<br /> rescheduled, not to call sk_stop_timer_sync() on "itself".