cve 2026 23240

The tag cve 2026 23240 covers a specific Linux kernel vulnerability that involves a race condition in the kernel TLS implementation. The issue, identified as CVE-2026-23240, occurs in the tls_sw_cancel_work_tx() function where a delayed work item can be re-queued after cancellation, leading to use-after-free of a TLS object. The fix replaces cancel_delayed_work_sync() with disable_delayed_work_sync() to both drain and prevent re-queueing. This tag is relevant for Linux system administrators and developers tracking kernel security patches, particularly those managing TLS offload or encrypted network connections.