CVE-2026-99059
kernel: wireguard: noise: reject response consumption after intermediate initiation
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 23, 2026
Updated · October 31, 2026
Description
A flaw was found in the Linux kernel's WireGuard implementation. A race condition during the processing of duplicate handshake response messages can allow a remote network peer to cause an inconsistent session state. When duplicate responses are handled concurrently with a new handshake initiation, the handshake state can be improperly reused, leading to session desynchronization or connection failure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-366 · Race Condition within a Thread