Skip to main content
← All vulnerabilities
CVE-2026-23302

net: annotate data-races around sk->sk_{data_ready,write_space}

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.1.177, 6.6.136, 6.12.82, 6.18.17, 6.19.7
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 604326b41a6fb9b4a78b6179335decee0365cd8c · fixed in 279f2b67d1c44ee139bd3fdb221850daa9358449; From 604326b41a6fb9b4a78b6179335decee0365cd8c · fixed in 7ad01905831c815520f1b0486336a03bb7420465; From 604326b41a6fb9b4a78b6179335decee0365cd8c · fixed in c494448bb522bbbb63096540eb2319101a0480ab; From 604326b41a6fb9b4a78b6179335decee0365cd8c · fixed in f17c1c4acbe2bd702abce73a847a04a196fab2c5; From 604326b41a6fb9b4a78b6179335decee0365cd8c · fixed in 27fccdbcbbfc4651b6f66756e6fa3f52e051ec23; From 604326b41a6fb9b4a78b6179335decee0365cd8c · fixed in 2ef2b20cf4e04ac8a6ba68493f8780776ff84300

  • Linux Linux

    4.20

  • KernelLinux

    From 4.20.0 · fixed in 6.1.177; From 6.2.0 · fixed in 6.6.136; From 6.7.0 · fixed in 6.12.82; From 6.13.0 · fixed in 6.18.17; From 6.19.0 · fixed in 6.19.7

References 6

git.kernel.org