CVE-2026-97523
High
Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mss_now reset to 0 for a divide operation. Address the issue by explicitly checking for the critical scenario.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linuxd74b2e26b54a7dae1d87c1f19ae0d6db500e5e03, 5883ae880f51edc4b1484e787473b865b6159ead, 0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0, 8f11430d51ff8365bc51b670bc3002b65ae4c6b7, a09c87abf10a0a7e203137c75b5381aa63d9b31d, 4c856f3c151a2f3fa237caa651c44015916ca584, 42064de57fb83231fcc89663a94885f228a1ee53, 5.15.222, 5.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fb9c73ef2ac2ec816efdc8b9267bc04e1369c20b ≤ v < d74b2e26b54a7dae1d87c1f19ae0d6db500e5e03, c886d70286bf3ad411eb3d689328a67f7102c6ae ≤ v < 5883ae880f51edc4b1484e787473b865b6159ead, c886d70286bf3ad411eb3d689328a67f7102c6ae ≤ v < 0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0, c886d70286bf3ad411eb3d689328a67f7102c6ae ≤ v < 8f11430d51ff8365bc51b670bc3002b65ae4c6b7, c886d70286bf3ad411eb3d689328a67f7102c6ae ≤ v < a09c87abf10a0a7e203137c75b5381aa63d9b31d, c886d70286bf3ad411eb3d689328a67f7102c6ae ≤ v < 4c856f3c151a2f3fa237caa651c44015916ca584, c886d70286bf3ad411eb3d689328a67f7102c6ae ≤ v < 42064de57fb83231fcc89663a94885f228a1ee53, 8caf5c15b5288d52d9c89374d6c10fa32ee84ec5, 5.15.190 ≤ v < 5.15.222, 5.19.4 ≤ v < 5.20, 6.0 | d74b2e26b54a7dae1d87c1f19ae0d6db500e5e03, 5883ae880f51edc4b1484e787473b865b6159ead, 0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0, 8f11430d51ff8365bc51b670bc3002b65ae4c6b7, a09c87abf10a0a7e203137c75b5381aa63d9b31d, 4c856f3c151a2f3fa237caa651c44015916ca584, 42064de57fb83231fcc89663a94885f228a1ee53, 5.15.222, 5.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.