PT-2026-8117 · Linux+2 · Linux Kernel+2

Syzbot · Published 2026-01-01 · Updated 2026-06-16 · CVE-2026-23124

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a data race condition within the ndisc router discovery() function. The syzbot tool identified that this function could read and write to in6 dev->ra mtu without proper locking mechanisms. This race condition occurs during the handling of Neighbor Discovery (NDISC) router discovery messages. The issue involves concurrent read and write operations to the same memory location, potentially leading to unpredictable behavior or system instability. The function ndisc router discovery() is called from ndisc rcv(), icmpv6 rcv(), ip6 protocol deliver rcu(), ip6 input finish(), ip6 input(), ip6 mc input(), and ip6 rcv finish().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23124

OESA-2026-1760

USN-8162-1

USN-8180-1

USN-8180-2

USN-8180-3

USN-8180-4

USN-8180-5

USN-8180-6

USN-8186-1

USN-8187-1

USN-8188-1

USN-8243-1

USN-8275-1

USN-8278-1

USN-8278-2

USN-8289-1

USN-8289-2

USN-8296-1

USN-8296-2

USN-8297-1

USN-8393-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 824

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23124.json · Exploit
• https://ubuntu.com/security/CVE-2025-40306 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40029 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40179 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23137 · Security Note
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68773 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23133 · Security Note
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68794 · Security Note