CVE record · CVE-2026-97524

mptcp: avoid unneeded actions on subflow reset

CVSS 7.5 HighEPSS 0.0075 · 55th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:21 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected fde99e972b8f88cebe619241d7aa43d288ef666a to before 6d669c740933124eae3df8cfc15995af9bcc6aba git affected 12c1676d598e3b8dd92a033b623b792cc2ea1ec5 to before 83a7dcdd2b1060484528da70a643125174d47e5a git affected 35668f8ec84f6c944676e48ecc6bbc5fc8e6fe25 to before a370e56024df0b07e3120c45a9773ae123819fd6 git affected b8be15d1ae7ea4eedd547c3b3141f592fbddcd30 to before 1962841387087970d75ba8b8d4c2aa2d45705e50 git affected e32d262c89e2b22cb0640223f953b548617ed8a6 to before 4b7abdcb5ba832fafab679f0d998af39cbc99307 git affected e32d262c89e2b22cb0640223f953b548617ed8a6 to before b2dbcc1ed48b5ac070a41db4a52aade6823c4df0 git affected e32d262c89e2b22cb0640223f953b548617ed8a6 to before ce7e4ede01ed3e47a48c0f1ce1d87bf4864bee9f git affected e32d262c89e2b22cb0640223f953b548617ed8a6 to before 2b0f561f21b27c40c91ea4975268a06092bd7e9c git affected 8bfd391bde685df7289b928ce8876a3583be4bfb git affected 5.10.228 to before 5.10.271 semver affected 5.15.169 to before 5.15.222 semver affected 6.1.113 to before 6.1.189 semver and 2 more Other versions: unaffected
Linux	Linux	affected 6.12 unaffected before 6.12 semver unaffected 5.10.271 to 5.10., inclusive semver unaffected 5.15.222 to 5.15., inclusive semver unaffected 6.1.189 to 6.1., inclusive semver unaffected 6.6.158 to 6.6., inclusive semver unaffected 6.12.111 to 6.12., inclusive semver unaffected 6.18.53 to 6.18., inclusive semver unaffected 7.2.7 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-97524
CNA: Linux
Tags: Linux kernel
Published: 25 Sept 2026
Updated: 19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.5	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CNA (Linux)

CISA KEV Not listed.
EPSS 0.0075, the 55th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.