PT-2026-30411

CVE-2026-5590

·

Published

2026-04-05

·

Updated

2026-04-05

Description by

CVSS 3.1
6.4
Medium
MetricsAV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions Versions prior to a fix are affected.
Description A race condition during TCP connection teardown can cause tcp recv() to operate on a connection that has already been released. If tcp conn search() returns NULL while processing a SYN packet, a NULL pointer derived from stale context data is passed to tcp backlog is full() and dereferenced without validation, leading to a crash.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-4VQM-PW24-G9JP
Found an issue in the description? Have something to add? Feel free to write us 👾