CVE-2026-23302
MEDIUM
MEDIUM
Priority: 0.00
BB Relevance:
24/100
Published: 2026-03-25
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.
Weakness Classification (1)
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 604326b41a6fb9b4a78b6179335decee0365cd8c < 279f2b67d1c44ee139bd3fdb221850daa9358449 |
| Linux | Linux | 604326b41a6fb9b4a78b6179335decee0365cd8c < 7ad01905831c815520f1b0486336a03bb7420465 |
| Linux | Linux | 604326b41a6fb9b4a78b6179335decee0365cd8c < c494448bb522bbbb63096540eb2319101a0480ab |
| Linux | Linux | 604326b41a6fb9b4a78b6179335decee0365cd8c < f17c1c4acbe2bd702abce73a847a04a196fab2c5 |
| Linux | Linux | 604326b41a6fb9b4a78b6179335decee0365cd8c < 27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 |
| Linux | Linux | 604326b41a6fb9b4a78b6179335decee0365cd8c < 2ef2b20cf4e04ac8a6ba68493f8780776ff84300 |
| Linux | Linux | 4.20 |
| linux | linux_kernel | 4.20 – 6.6.136 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |