PT-2026-30136 · Mlx5E+1 · Mlx5E+1

Published 2026-04-03 · Updated 2026-04-20 · CVE-2026-23441

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a flaw in the net/mlx5e module where concurrent access to the IPSec ASO context could occur. This was due to a race condition where the ASO spinlock was released before hardware processing of a WQE was complete. A second operation could then overwrite the shared DMA-mapped context before the first operation’s completion, leading to a corrupted context and unexpected behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-23441

OESA-2026-1946

OESA-2026-1947

OESA-2026-1948

Affected Products

Linux Kernel

Mlx5E

References · 33

• https://nvd.nist.gov/vuln/detail/CVE-2026-23461 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31405 · Security Note
• https://git.kernel.org/stable/c/6834d196107d5267dcad31b44211da7698e8f618 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23440 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23441 · Vendor Advisory
• https://git.kernel.org/stable/c/2c6a5be0aee5a44066f68a332c30650900e32ad4 · Patch
• https://osv.dev/vulnerability/OESA-2026-1947 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31399 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23389 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-23441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31408 · Security Note
• https://ubuntu.com/security/CVE-2026-23441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23247 · Security Note
• https://git.kernel.org/stable/c/c3db55dc0f3344b62da25b025a8396d78763b5fa · Patch