CVE-2026-52928

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-06-24 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive queue is at the urgent mark for MSG_OOB. In AF_UNIX, MSG_OOB is supported only for SOCK_STREAM sockets. SOCK_DGRAM and SOCK_SEQPACKET reject MSG_OOB in sendmsg() and recvmsg(), so they should not support SIOCATMARK either. Return -EOPNOTSUPP for non-stream sockets before checking the receive queue.

Affected Software (11)

VendorProductVersion
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < ec123873fdc83e7244c8ed6d17b8f8ea6c416a67
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < f085971de6d6b8ef946a5e0bcd73ff24509a0f85
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < b741c9c6ef59f17c1f104ddf1217ef77f79ed29b
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < 645b1ed3259af38b7814242a420bc2081bdd1eb6
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < c34c41446acf6c0d13b5b06c809be11e0f7f2729
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < 3147ddf5a41c20c45c2eb69e00b62f10f822056a
Linux Linux 314001f0bf927015e459c9d387d62a231fe93af3 < d119775f2bad827edc28071c061fdd4a91f889a5
Linux Linux 5.15
linux linux_kernel 5.15 – 5.15.211
linux linux_kernel 7.1
linux linux_kernel 7.1

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.11%
Raw Score 0.001140
Percentile 1.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00114
2026-11-12
0.00114
2026-11-10
0.00114
2026-11-09
0.00114
2026-11-08
0.00114
2026-11-07
0.00114
2026-11-06
0.00114

Intelligence Sources

mitre ref →
nvd ref →