Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23120

In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tp_tunnel_del_work() We should read sk->sk_socket only when dealing with kernel sockets. syzbot reported the following data-race: BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release write to 0xffff88811c182b20 of 8 bytes by task 5365 on cpu 0: sk_set_socket include/net/sock.h:2092 [inline] sock_orphan include/net/sock.h:2118 [inline] sk_common_release+0xae/0x230 net/core/so
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b81e10a704e2154856e0723963c549525e63d5052204844d14035754957f7e62
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/l2tp/l2tp_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4","status":"affected","version":"d00fa9adc528c1b0e64d532556764852df8bd7b9","versionType":"git"},{"lessThan":"36c40a80109f1771d59558050b1a71e13c60c759","status":"affected","version":"d00fa9adc528c1b0e64d532556764852df8bd7b9","versionType":"git"},{"lessThan":"eae074dab764ea181bbed5e88626889319177498","status":"affected","version":"d00fa9adc528c1b0e64d53255…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/l2tp/l2tp_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.16"},{"lessThan":"4.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThan…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/l2tp/l2tp_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4","status":"affected","version":"d00fa9adc528c1b0e64d532556764852df8bd7b9","versionType":"git"},{"lessThan":"36c40a80109f1771d59558050b1a71e13c60c759","status":"affected","version":"d00fa9adc528c1b0e64d532556764852df8bd7b9","versionType":"git"},{"lessThan":"eae074dab764ea181bbed5e88626889319177498","status":"affected","version":"d00fa9adc528c1b0e64d53255…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/l2tp/l2tp_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.16"},{"lessThan":"4.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThan…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/32d417497b79efb403d75f4c185fe6fd9d64b94f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/36c40a80109f1771d59558050b1a71e13c60c759"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/3d6d414b214ce31659bded2f8df50c93a3769474"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/68e92085427c84e7679ddb53c0d68836d220b6e7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/7a29f6bf60f2590fe5e9c4decb451e19afad2bcf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/eae074dab764ea181bbed5e88626889319177498"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:179f3cb7dc83d7b66af20954d6d57d03a22e783a7f7b921536e20022be7e8502 · sha256:2e23f15520929e61… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer