CVE-2026-23169

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23169
CVSS

No CVSS.

I

n the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes in mptcp_pm_nl_get_local_id() and/or mptcp_pm_nl_is_backup() Root cause is list_splice_init() in mptcp_pm_nl_flush_addrs_doit() which is not RCU ready. list_splice_init_rcu() can not be called here while holding pernet->lock spinlock. Many thanks to Eulgyu Kim for providing a repro and testing our patches.

References
Link Resource
https://git.kernel.org/stable/c/1f1b9523527df02685dde603f20ff6e603d8e4a1
https://git.kernel.org/stable/c/338d40bab283da2639780ee3e458fb61f1567d8c
https://git.kernel.org/stable/c/455e882192c9833f176f3fbbbb2f036b6c5bf555
https://git.kernel.org/stable/c/51223bdd0f60b06cfc7f25885c4d4be917adba94
https://git.kernel.org/stable/c/7896dbe990d56d5bb8097863b2645355633665eb
https://git.kernel.org/stable/c/e2a9eeb69f7d4ca4cf4c70463af77664fdb6ab1d
Configurations

No configuration.

History

19 Feb 2026, 16:27

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/338d40bab283da2639780ee3e458fb61f1567d8c -
  • () https://git.kernel.org/stable/c/7896dbe990d56d5bb8097863b2645355633665eb -

18 Feb 2026, 17:52

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: mptcp: corrección de condición de carrera en mptcp_pm_nl_flush_addrs_doit() syzbot y Eulgyu Kim reportaron fallos en mptcp_pm_nl_get_local_id() y/o mptcp_pm_nl_is_backup() La causa raíz es list_splice_init() en mptcp_pm_nl_flush_addrs_doit() que no está preparada para RCU. list_splice_init_rcu() no puede ser llamada aquí mientras se mantiene el spinlock pernet->lock. Muchas gracias a Eulgyu Kim por proporcionar una reproducción y probar nuestros parches.

16 Feb 2026, 10:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/455e882192c9833f176f3fbbbb2f036b6c5bf555 -
  • () https://git.kernel.org/stable/c/51223bdd0f60b06cfc7f25885c4d4be917adba94 -

14 Feb 2026, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-14 16:15

Updated : 2026-02-19 16:27

NVD link : CVE-2026-23169

Mitre link : CVE-2026-23169

CVE.ORG link : CVE-2026-23169

JSON object : View

Products Affected

No product.

CWE

No CWE.