CVE-2026-46015

Linux · Kernel

A missing notification during listener migration in the Linux kernel's TCP stack can lead to stalled connections.

Executive summary

A failure to notify waiters during TCP listener migration in the Linux kernel can cause connection handling issues and potential service disruption.

Vulnerability

When a TCP child socket is migrated from a closing listener to another socket in an SO_REUSEPORT group, the target listener does not receive a notification via sk_data_ready(). This leaves the waiter unaware of the new accept-queue entry.

Business impact

This issue can result in dropped or stalled network connections, impacting the availability of network services. While not a direct exploit for code execution, the 7.8 CVSS score acknowledges the potential for significant denial-of-service in high-traffic network environments.

Remediation

Immediate Action: Update the Linux kernel to a version that includes the fix for sk_data_ready() notifications during listener migration.

Proactive Monitoring: Monitor network service performance and check for stalled accept-queues or unexpected connection timeouts.

Compensating Controls: Ensure network load balancers are configured to handle potential connection drops gracefully if the kernel cannot be patched immediately.

Exploitation status

Public Exploit Available: false

Analyst recommendation

For high-availability network services, this update is essential to prevent connection handling errors. Administrators should test and deploy the kernel patch in their network infrastructure to ensure continued stability of TCP services.