CVE-2026-46015
Linux · Kernel
A missing notification during listener migration in the Linux kernel's TCP stack can lead to stalled connections.
Executive summary
A failure to notify waiters during TCP listener migration in the Linux kernel can cause connection handling issues and potential service disruption.
Vulnerability
When a TCP child socket is migrated from a closing listener to another socket in an SO_REUSEPORT group, the target listener does not receive a notification via sk_data_ready(). This leaves the waiter unaware of the new accept-queue entry.
Business impact
This issue can result in dropped or stalled network connections, impacting the availability of network services. While not a direct exploit for code execution, the 7.8 CVSS score acknowledges the potential for significant denial-of-service in high-traffic network environments.
Remediation
Immediate Action: Update the Linux kernel to a version that includes the fix for sk_data_ready() notifications during listener migration.
Proactive Monitoring: Monitor network service performance and check for stalled accept-queues or unexpected connection timeouts.
Compensating Controls: Ensure network load balancers are configured to handle potential connection drops gracefully if the kernel cannot be patched immediately.
Exploitation status
Public Exploit Available: false
Analyst recommendation
For high-availability network services, this update is essential to prevent connection handling errors. Administrators should test and deploy the kernel patch in their network infrastructure to ensure continued stability of TCP services.