{"id":"CVE-2026-97523","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: close race between scheduler and state change\n\nThe mptcp scheduler may race with subflow sockets state change: data\ntransmission on the selected socket may fail …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: close race between scheduler and state change\n\nThe mptcp scheduler may race with subflow sockets state change: data\ntransmission on the selected socket may fail …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= c886d70286bf3ad411eb3d689328a67f7102c6ae < 8f11430d51ff8365bc51b670bc3002b65ae4c6b7","Linux >= c886d70286bf3ad411eb3d689328a67f7102c6ae < a09c87abf10a0a7e203137c75b5381aa63d9b31d","Linux >= c886d70286bf3ad411eb3d689328a67f7102c6ae < 4c856f3c151a2f3fa237caa651c44015916ca584","Linux >= c886d70286bf3ad411eb3d689328a67f7102c6ae < 42064de57fb83231fcc89663a94885f228a1ee53","Linux fb9c73ef2ac2ec816efdc8b9267bc04e1369c20b","Linux 8caf5c15b5288d52d9c89374d6c10fa32ee84ec5","Linux >= 5.15.190 < 5.16","Linux >= 5.19.4 < 5.20","Linux 6.0"],"published":"2026-09-25","updated":"2026-09-25","sourceUpdated":"2026-09-25T15:17:57.653","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97523","references":[{"url":"https://git.kernel.org/stable/c/42064de57fb83231fcc89663a94885f228a1ee53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4c856f3c151a2f3fa237caa651c44015916ca584","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8f11430d51ff8365bc51b670bc3002b65ae4c6b7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a09c87abf10a0a7e203137c75b5381aa63d9b31d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-25T11:06:38.927Z","slug":"CVE-2026-97523","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: close race between scheduler and state change\n\nThe mptcp scheduler may race with subflow sockets state change: data\ntransmission on the selected socket may fail and a later release could\ntry to use mss_now reset to 0 for a divide operation.\n\nAddress the issue by explicitly checking for the critical scenario.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":211018,"id":"CVE-2026-97523","ts":1790349124128,"field":"cvss","old":null,"new":"7.5"},{"seq":211017,"id":"CVE-2026-97523","ts":1790349124128,"field":"severity","old":"none","new":"high"}]}