CVE-2026-5590: net: ip/tcp: Null pointer dereference can be triggered by a race condition
A race condition during TCP connection teardown can cause tcprecv() to operate on a connection that has already been released. If tcpconnsearch() returns NULL while processing a SYN packet, a NULL pointer derived from stale context data is passed to tcpbacklogisfull() and dereferenced without validation, leading to a crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5590?
CVE-2026-5590 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2026-5590?
To fix CVE-2026-5590, update your Linux kernel to the latest version where the vulnerability has been patched.
What types of systems are affected by CVE-2026-5590?
CVE-2026-5590 affects Linux kernel versions vulnerable to the race condition during TCP connection teardown.
Can CVE-2026-5590 lead to a denial of service?
Yes, CVE-2026-5590 can lead to a denial of service if an attacker exploits the race condition.
When was CVE-2026-5590 disclosed?
CVE-2026-5590 was disclosed in 2026 as a significant security concern in the Linux kernel.