Search: CVE-2026-72221

CVE-2026-72221 is a critical race condition vulnerability in the Linux kernel's sunrpc subsystem related to TLS handshake cancellation. The flaw occurs when the kernel does not properly wait for an in-flight TLS handshake callback to complete before proceeding, leading to two race conditions that can cause session mismanagement or connection teardown despite a successful handshake. This can result in corruption of internal kernel structures and potentially compromise system stability or security. The issue affects multiple Linux kernel versions prior to fixed releases in the 6.8 and 7.0 series and several specific older versions. A patch is available and has been released by the vendor.