CVE-2026-23118

A data race flaw was found in the Linux kernel's RxRPC protocol implementation. The last_tx_at field is accessed without proper synchronization between rxrpc_peer_keepalive_worker() and rxrpc_send_data_packet(). Additionally, on 32-bit architectures, the 64-bit last_tx_at value can experience load/store tearing. The fix changes the field to an unsigned int to prevent tearing and silence the KCSAN warning.

The data race has minimal practical impact as the last_tx_at value is only used for approximate keepalive timing decisions, not security-critical operations. An incorrect read would at worst cause a slightly early or late keepalive packet. The fix primarily addresses KCSAN warnings and theoretical tearing on 32-bit systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.