CVE-2026-46015

A flaw was found in the Linux kernel's TCP networking subsystem. When an established network connection is migrated between listener sockets within the same SO_REUSEPORT group, applications waiting for new connections may not be properly notified. This can cause poll(), epoll_wait(), and blocking accept() calls to remain unresponsive indefinitely, leading to a Denial of Service (DoS) for affected applications.

This vulnerability is rated as a Moderate impact because triggering the defect requires specific network application architectures that employ TCP SO_REUSEPORT listener migration, restricting the blast radius to services actively shutting down listening sockets. Under these conditions, migrated connection requests may fail to wake event-polling mechanisms or blocking accept routines in surviving listener processes, resulting in localized service unresponsiveness rather than privilege escalation or broader kernel instability. Earlier enterprise releases, including Red Hat Enterprise Linux 7 and 8, lack the affected listener migration logic and are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.