Junglewise Threat Intelligence

CVE-2026-97523: In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp schedul

CVE-2026-97523 · Severity: high · CVSS 7.5 · Published 2026-09-25

Executive brief

In the Linux kernel, the following vulnerability has been resolved:

mptcp: close race between scheduler and state change

The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mss_now reset to 0 for a divide operation.

Address the issue by explicitly checking for the critical scenario.

References