PT-2026-37538 · Linux · Linux Kernel
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists in the Linux kernel within the
tcp v6 syn recv sock() function. The issue occurs because certain operations are performed after the call to tcp v4 syn recv sock(), at which point the child socket is already visible in the TCP ehash table and accessible by other CPUs. Because newinet->pinet6 still points to the listener ipv6 pinfo during this window, it can lead to unstable system behavior.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel