CVE-2026-23440

A flaw was found in the Linux kernel's net/mlx5e component. A race condition occurs during the handling of IPSec (Internet Protocol Security) Extended Sequence Number (ESN) updates. This can cause the system to process the same update event multiple times, leading to an incorrect ESN state. The consequence is anti-replay failures and a complete halt of IPSec traffic, resulting in a Denial of Service.

This vulnerability specifically affects systems using Mellanox ConnectX network adapters with IPSec full offload mode enabled. The race condition causes IPSec traffic to halt but does not allow code execution or data disclosure. Systems not using mlx5 hardware or not using IPSec offload are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.