{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-80588",
  "modified": "2026-10-07T14:35:31Z",
  "upstream": [
    "CVE-2026-80588"
  ],
  "published": "2026-08-26T14:37:59Z",
  "summary": "mptcp: reclaim forward-allocated memory on RX path errors",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: reclaim forward-allocated memory on RX path errors\n\nAfter commit 9db5b3cec4ec (\"mptcp: borrow forward memory from subflow\"),\nerrors in the receive path prior to queueing skbs into the receive\nqueue do not trigger forward-allocated memory reclaiming.\n\nPrevent forward memory from growing unboundedly in pathological drop\nscenarios by explicitly reclaiming memory when skbs are dropped.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:13",
        "name": "linux"
      },
      "versions": [
        "1:6.18.39-1+rpt1"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.18.39+rpt-rpi-2712",
            "binary_version": "1:6.18.39-1+rpt1"
          },
          {
            "binary_name": "linux-image-6.18.39+rpt-rpi-v8",
            "binary_version": "1:6.18.39-1+rpt1"
          },
          {
            "binary_name": "linux-image-6.18.39+rpt-rpi-v8-rt",
            "binary_version": "1:6.18.39-1+rpt1"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.18.39-1+rpt1": {
            "linux_commit": "60ea684a8ace97bb0db1a16e20753bdd6ab371ff",
            "upstream_version": "6.18.39",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.18.46"
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80588"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/473f1a5ab2abc98dd9e74b95b9c23c66c47535cc"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/8277f48a06d3aa1441f6d0b6998ccc0360d30ed8"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/41b49a8b914ec7dcb03eae93fb27f3c464078644"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-08-27T05:18:36Z"
  }
}