PT-2026-30136 · Linux+1 · Linux Kernel+1

CVE-2026-23441 · Published 2026-04-03 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a flaw in the net/mlx5e module where concurrent access to the IPSec ASO context could occur. This was due to a race condition where the ASO spinlock was released before hardware processing of a WQE was complete. A second operation could then overwrite the shared DMA-mapped context before the first operation’s completion, leading to a corrupted context and unexpected behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-23441

OESA-2026-1946

OESA-2026-1947

OESA-2026-1948

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21834-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

SUSE-SU-2026:21876-1

SUSE-SU-2026:21877-1

SUSE-SU-2026:21916-1

SUSE-SU-2026:21919-1

SUSE-SU-2026:2217-1

SUSE-SU-2026:2238-1

USN-8567-1

USN-8574-1

USN-8574-2

USN-8574-3

USN-8595-1

USN-8595-2

USN-8595-3

USN-8596-1

USN-8606-1

USN-8607-1

USN-8608-1

USN-8609-1

USN-8619-1

Affected Products

Linux Kernel

Mlx5E

References · 1819

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23441.json · Exploit
• https://ubuntu.com/security/CVE-2026-52962 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31424 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8607-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43502 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23303 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8607-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31696 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43171 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31603 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43068 · Vendor Advisory