CVE-2026-23169

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the mptcp pm nl flush addrs doit() function within the Linux kernel’s MPTCP implementation. This issue stems from the use of list splice init() which is not RCU ready, leading to potential crashes reported by syzbot and Eulgyu Kim in functions such as mptcp pm nl get local id() and mptcp pm nl is backup(). The root cause is the improper use of list splice init rcu() while holding a spinlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.