CVE-2026-97523

Summary

In the Linux kernel, the following vulnerability has been resolved:

mptcp: close race between scheduler and state change

The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mss_now reset to 0 for a divide operation.

Address the issue by explicitly checking for the critical scenario.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc886d70286bf3ad411eb3d689328a67f7102c6ae < 8f11430d51ff8365bc51b670bc3002b65ae4c6b7affected
LinuxLinuxc886d70286bf3ad411eb3d689328a67f7102c6ae < a09c87abf10a0a7e203137c75b5381aa63d9b31daffected
LinuxLinuxc886d70286bf3ad411eb3d689328a67f7102c6ae < 4c856f3c151a2f3fa237caa651c44015916ca584affected
LinuxLinuxc886d70286bf3ad411eb3d689328a67f7102c6ae < 42064de57fb83231fcc89663a94885f228a1ee53affected
LinuxLinuxfb9c73ef2ac2ec816efdc8b9267bc04e1369c20baffected
LinuxLinux8caf5c15b5288d52d9c89374d6c10fa32ee84ec5affected
LinuxLinux5.15.190 < 5.16affected
LinuxLinux5.19.4 < 5.20affected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2.7 <= 7.2.*unaffected
LinuxLinux7.3-rc4 <= *unaffected

Weaknesses

References