Cloudanix VulnDB

CVE-2026-97523

High · 7.5

CVSS

7.5

EPSS

0.7%

Published

Sep 25, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mss_now reset to 0 for a divide operation. Address the issue by explicitly checking for the critical scenario.

Affected packages

Ecosystem Package Introduced Fixed