Serialization Flaw in Linux Kernel GTP Component

CVE-2026-80851

What is CVE-2026-80851?

A serialization flaw in the GTP (GPRS Tunneling Protocol) component of the Linux kernel has been identified, allowing concurrent deletion of PDP (Packet Data Protocol) contexts. This issue arises from the non-atomic execution of GTP_CMD_DELPDP and RTM_DELLINK commands, potentially leading to data corruption as both processes may attempt to delete the same PDP context simultaneously. The flaw was uncovered through static analysis and reproduced using a multi-threaded program, which caused a general protection fault when dereferencing an invalid pointer. Mitigation involves adding mutex serialization around PDP context management functions to prevent concurrent access and ensure data integrity.

References