CVE-2026-23169 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes in mptcp_pm_nl_get_local_id() and/or mptcp_pm_nl_is_backup() Root cause is list_splice_init() in mptcp_pm_nl_flush_addrs_doit() which is not RCU ready. list_splice_init_rcu() can not be called here while holding pernet->lock spinlock. Many thanks to Eulgyu Kim for providing a repro and testing our patches.
A race condition vulnerability has been identified in the Linux kernel's Multipath TCP (MPTCP) implementation, specifically within the address flushing process of the Netlink interface. This vulnerability affects the MPTCP connection management and can lead to crashes when handling local IDs or backup states. The issue arises because the function responsible for flushing addresses is not properly synchronized for Read-Copy Update (RCU) operations, creating a timing conflict that can disrupt normal processing.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that fixes this issue is available in the Linux stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1f1b9523527df02685dde603f20ff6e603d8e4a1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/338d40bab283da2639780ee3e458fb61f1567d8c | kernel.org | Patch |
| https://git.kernel.org/stable/c/455e882192c9833f176f3fbbbb2f036b6c5bf555 | kernel.org | Patch |
| https://git.kernel.org/stable/c/51223bdd0f60b06cfc7f25885c4d4be917adba94 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7896dbe990d56d5bb8097863b2645355633665eb | kernel.org | Patch |
| https://git.kernel.org/stable/c/e2a9eeb69f7d4ca4cf4c70463af77664fdb6ab1d | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.11, < 5.15.201 >= 5.16, < 6.1.164 >= 6.2, < 6.6.125 >= 6.7, < 6.12.72 >= 6.13, < 6.18.9 6.19 rc1 6.19 rc2 6.19 rc3 6.19 rc4 6.19 rc5 6.19 rc6 6.19 rc7 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Apr 3, 2026 | CVE Modified | kernel.org |
| Mar 18, 2026 | Initial Analysis | [email protected] |
| Feb 19, 2026 | CVE Modified | kernel.org |
| Feb 16, 2026 | CVE Modified | kernel.org |
| Feb 14, 2026 | New CVE Received | kernel.org |