Linux Kernel Vulnerability in TCP Connection Handling

CVE-2026-99213

What is CVE-2026-99213?

A vulnerability exists in the Linux kernel's handling of TCP connections, specifically around the transition from TCP_ESTABLISHED to TCP_CLOSING during reset operations. This flaw can lead to memory corruption due to improper handling of socket states, potentially allowing for crashes and lost transports in network communications. The connect function may not accurately reflect connection status, posing risks for system stability and data integrity. The issue has been exacerbated by faulty logic in socket management, requiring careful attention to ensure that socket operations maintain consistent state management.

References