Beveiligingsadvies

CVE-2026-5590

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-05 03:34:56
Laatst bijgewerkt 2026-04-06 14:22:23
Toegewezen door zephyr
CVSS-score 6.4
Status PUBLISHED

Beschrijving

A race condition during TCP connection teardown can cause tcp_recv() to operate on a connection that has already been released. If tcp_conn_search() returns NULL while processing a SYN packet, a NULL pointer derived from stale context data is passed to tcp_backlog_is_full() and dereferenced without validation, leading to a crash.