# mptcp: avoid unneeded actions on subflow reset

CVE record · `CVE-2026-97524`

- **Identifiers:** `CVE-2026-97524`
- **State:** Confirmed
- **Severity:** CVSS 7.5 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 25 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:21 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `fde99e972b8f88cebe619241d7aa43d288ef666a to before 6d669c740933124eae3df8cfc15995af9bcc6aba` (git)
  - affected: `12c1676d598e3b8dd92a033b623b792cc2ea1ec5 to before 83a7dcdd2b1060484528da70a643125174d47e5a` (git)
  - affected: `35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25 to before a370e56024df0b07e3120c45a9773ae123819fd6` (git)
  - affected: `b8be15d1ae7ea4eedd547c3b3141f592fbddcd30 to before 1962841387087970d75ba8b8d4c2aa2d45705e50` (git)
  - affected: `e32d262c89e2b22cb0640223f953b548617ed8a6 to before 4b7abdcb5ba832fafab679f0d998af39cbc99307` (git)
  - affected: `e32d262c89e2b22cb0640223f953b548617ed8a6 to before b2dbcc1ed48b5ac070a41db4a52aade6823c4df0` (git)
  - affected: `e32d262c89e2b22cb0640223f953b548617ed8a6 to before ce7e4ede01ed3e47a48c0f1ce1d87bf4864bee9f` (git)
  - affected: `e32d262c89e2b22cb0640223f953b548617ed8a6 to before 2b0f561f21b27c40c91ea4975268a06092bd7e9c` (git)
  - affected: `8bfd391bde685df7289b928ce8876a3583be4bfb` (git)
  - affected: `5.10.228 to before 5.10.271` (semver)
  - affected: `5.15.169 to before 5.15.222` (semver)
  - affected: `6.1.113 to before 6.1.189` (semver)
  - and 2 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.12`
  - unaffected: `before 6.12` (semver)
  - unaffected: `5.10.271 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.53 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.7 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.5 High, CVSS 3.1: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0075, the 55th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-97524](https://www.cve.org/CVERecord?id=CVE-2026-97524)
- [NVD: CVE-2026-97524](https://nvd.nist.gov/vuln/detail/CVE-2026-97524)

### References from the CNA

- <https://git.kernel.org/stable/c/6d669c740933124eae3df8cfc15995af9bcc6aba>
- <https://git.kernel.org/stable/c/83a7dcdd2b1060484528da70a643125174d47e5a>
- <https://git.kernel.org/stable/c/a370e56024df0b07e3120c45a9773ae123819fd6>
- <https://git.kernel.org/stable/c/1962841387087970d75ba8b8d4c2aa2d45705e50>
- <https://git.kernel.org/stable/c/4b7abdcb5ba832fafab679f0d998af39cbc99307>
- <https://git.kernel.org/stable/c/b2dbcc1ed48b5ac070a41db4a52aade6823c4df0>
- <https://git.kernel.org/stable/c/ce7e4ede01ed3e47a48c0f1ce1d87bf4864bee9f>
- <https://git.kernel.org/stable/c/2b0f561f21b27c40c91ea4975268a06092bd7e9c>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-97524>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-97524/>. Everything for agents: <https://agentprime.io/llms.txt>.