Memory Management Issue in MultiPath TCP on Linux Kernel by Linux Foundation

CVE-2026-80588

What is CVE-2026-80588?

A memory management issue has been identified in MultiPath TCP within the Linux Kernel, where errors occurring in the receive path can lead to forward-allocated memory not being reclaimed properly. This situation can result in unbounded memory growth during problematic drop scenarios. The issue has been addressed in commit 9db5b3cec4ec, which improves the handling of memory reclamation by explicitly reclaiming forward memory when socket buffers are dropped before queuing.

References