CVE-2026-23441

MEDIUM EPSS 0.5%
Published Apr 3, 20262mo ago · Modified Jun 17, 20261w ago
4.7 CVSS 3.1
Medium
Find Similar
Published Apr 3, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent concurrent access to IPSec ASO context The query or updating IPSec offload object is through Access ASO WQE. The driver uses a single mlx5e_ipsec_aso struct for each PF, which contains a shared DMA-mapped context for all ASO operations. A race condition exists because the ASO spinlock is released before the hardware has finished processing WQE. If a second operation is initiated immediately after, it overwrites the shared context in the DMA area. When the first operation's completion is processed later, it reads this corrupted context, leading to unexpected behavior and incorrect results. This commit fixes the race by introducing a private context within each IPSec offload object. The shared ASO context is now copied to this private context while the ASO spinlock is held. Subsequent processing uses this saved, per-object context, ensuring its integrity is maintained.

CVSS Details

Base Score
4.7
Exploitability
1.0
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
0.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-362

Affected Products 12

VendorProductVersionRange
linuxlinux_kernel*≥6.2.1  –  <6.6.130
linuxlinux_kernel*≥6.7  –  <6.12.78
linuxlinux_kernel*≥6.13  –  <6.18.20
linuxlinux_kernel*≥6.19  –  <6.19.10
linuxlinux_kernel6.2any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/2c6a5be0aee5a44066f68a332c30650900e32ad4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6834d196107d5267dcad31b44211da7698e8f618
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/99aaee927800ea00b441b607737f9f67b1899755
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/99b36850d881e2d65912b2520a1c80d0fcc9429a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3db55dc0f3344b62da25b025a8396d78763b5fa
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2c6a5be0aee5a44066f68a332c30650900e32ad4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6834d196107d5267dcad31b44211da7698e8f618
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/99aaee927800ea00b441b607737f9f67b1899755
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/99b36850d881e2d65912b2520a1c80d0fcc9429a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3db55dc0f3344b62da25b025a8396d78763b5fa
    Patch