Security Advisory

CVE-2026-5590

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-05 03:34:56

Last updated 2026-04-06 14:22:23

Assigner zephyr

CVSS score 6.4

State PUBLISHED

Description

A race condition during TCP connection teardown can cause tcp_recv() to operate on a connection that has already been released. If tcp_conn_search() returns NULL while processing a SYN packet, a NULL pointer derived from stale context data is passed to tcp_backlog_is_full() and dereferenced without validation, leading to a crash.

← Browse all CVEs View on cve.org ↗