cve 2026 46137

  1. CVE-2026-46137: Linux MPTCP Race—Windows Teams Must Inventory WSL & Appliances

    CVE-2026-46137 was published by NVD on May 28, 2026, for a Linux kernel Multipath TCP path-manager race in the ADD_ADDR retransmission timer, fixed upstream by taking the socket lock in softirq context and retrying shortly when user context owns the socket. The terse advisory makes it look like...