CVE-2026-97523

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-97523
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97523.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97523
Downstream
Related
Published
2026-09-25T10:21:27Z
Modified
2026-10-09T17:26:58Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
mptcp: close race between scheduler and state change
Details

In the Linux kernel, the following vulnerability has been resolved:

mptcp: close race between scheduler and state change

The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mss_now reset to 0 for a divide operation.

Address the issue by explicitly checking for the critical scenario.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97523.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fb9c73ef2ac2ec816efdc8b9267bc04e1369c20b
Fixed
d74b2e26b54a7dae1d87c1f19ae0d6db500e5e03
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c886d70286bf3ad411eb3d689328a67f7102c6ae
Fixed
5883ae880f51edc4b1484e787473b865b6159ead
Fixed
0a926b5df8efdfbac07e2fb7fafb21849a2ad9c0
Fixed
8f11430d51ff8365bc51b670bc3002b65ae4c6b7
Fixed
a09c87abf10a0a7e203137c75b5381aa63d9b31d
Fixed
4c856f3c151a2f3fa237caa651c44015916ca584
Fixed
42064de57fb83231fcc89663a94885f228a1ee53
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.15.190
Fixed
5.15.222
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.19.4
Fixed
5.20
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8caf5c15b5288d52d9c89374d6c10fa32ee84ec5

Affected versions

v5.*
v5.15.190
v5.15.191
v5.15.192
v5.15.193
v5.15.194
v5.15.195
v5.15.196
v5.15.197
v5.15.198
v5.15.199
v5.15.200
v5.15.201
v5.15.202
v5.15.203
v5.15.204
v5.15.205
v5.15.206
v5.15.207
v5.15.208
v5.15.209
v5.15.210
v5.15.211
v5.15.212
v5.15.213
v5.15.214
v5.15.215
v5.15.216
v5.15.217
v5.15.218
v5.15.219
v5.15.220
v5.15.221
v5.19.10
v5.19.11
v5.19.12
v5.19.13
v5.19.14
v5.19.15
v5.19.16
v5.19.17
v5.19.4
v5.19.5
v5.19.6
v5.19.7
v5.19.8
v5.19.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97523.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
7.2.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97523.json"