CVE-2026-5590Disclosure(zephyrproject / zephyr)

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A race condition during TCP connection teardown can cause tcp_recv() to operate on a connection that has already been released. If tcp_conn_search() returns NULL while processing a SYN packet, a NULL pointer derived from stale context data is passed to tcp_backlog_is_full() and dereferenced without validation, leading to a crash.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • zephyr

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Products
zephyr

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-05: 2Technical Details · 2026-04-05: 104-05
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-5590 📊 Severity: 6.4 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5590 #CVE-2026-5590 #CVE #Medium #CyberSecurity #InfoSec https://t.co/mKfcUoqDfj

    Post summary

    The tweet announces CVE‑2026‑5590 with a medium severity rating but provides only minimal details and a link, lacking substantive technical or exploit information.

    0000047
    121 followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5590 - net: ip/tcp: Null pointer dereference can be triggered by a race condition Intel Report: https://ift.tt/NOBqH6A

    Post summary

    The alert identifies CVE‑2026‑5590, a race condition that may cause a null pointer dereference in the net:ip/tcp stack, and references an Intel report.

    0000051
    281 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSzephyrprojectzephyr---

Explore more