CVE-2026-97567
Received Received - Intake

Race Condition in Linux Kernel MPTCP Implementation

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect() and rtx Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous timer stop operation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97567
EUVD
EUVD-2026-86875

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition between the disconnect() and retransmission (rtx) operations in the Multipath TCP (MPTCP) subsystem. The race can cause inconsistent status states, potentially leading to unexpected behavior in network connections.

Impact Analysis

The race condition could disrupt MPTCP connections, causing data transmission issues or connection drops. Users relying on MPTCP for network reliability may experience instability or failures during high-load scenarios.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the race condition between disconnect() and rtx in the MPTCP implementation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97567. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart