CVE-2026-43198 Details

A race condition vulnerability has been identified in the Linux kernel's TCP implementation, specifically within the IPv6 socket handling. The issue arises in the 'tcp_v6_syn_recv_sock()' function, where the processing of child sockets after invoking 'tcp_v4_syn_recv_sock()' is delayed. This timing issue can lead to problems, as the child socket becomes visible in the TCP ehash table before it is fully initialized, potentially causing incorrect behavior when accessed by other CPUs. The vulnerability has been addressed by reorganizing the code to initialize the child socket properly before it is exposed to the ehash table, ensuring that it is ready for use and reducing the risk of interference from concurrent processes.

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is available in the Linux kernel stable tree.