CVE-2026-23124

CVE-2026-23124 addresses a data-race vulnerability in the Linux kernel's IPv6 networking stack, specifically within the ndisc_router_discovery() function. This race condition occurs when reading and writing the in6_dev->ra_mtu value without proper locking mechanisms. While the immediate impact is considered "best effort" and not critical, it indicates an underlying concurrency issue. The vulnerability has no assigned CVSS score, and its EPSS and FAUCET Risk Scores are very low, suggesting a minimal security risk. The attack vector and complexity are not explicitly detailed but appear to be internal to the kernel's operation, with no immediate indication of direct external exploitability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. This indicates a low level of attention and perceived threat from the cybersecurity community.