CVE-2026-23302
MEDIUM severity · CVSS 4.7 · CWE-362
4.7CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.
Impact & exploitability
Attack vectorLocal
Attack complexityHigh
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23Patch
- https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300Patch
- https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465Patch
- https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480abPatch
- https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5Patch
- https://git.kernel.org/stable/c/279f2b67d1c44ee139bd3fdb221850daa9358449