CVE-2026-46168

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description An issue exists in the Multipath TCP (mptcp) implementation where the use of lock sock fast() (an atomic context) around the sock set timestamp() and sock set timestamping() functions is unsafe. This is because both helper functions can sleep, which may lead to a scheduling while atomic panic, a state where the system attempts to switch tasks while holding a lock that forbids sleeping.

Recommendations Replace lock sock fast() with sleepable lock sock() and release sock() functions. Update to kernel-devel-7.0.11-1.1 or a newer version.