CVE-2026-23302

MEDIUM EPSS 0.5%
Published Mar 25, 20263mo ago · Modified Jun 17, 20261w ago
4.7 CVSS 3.1
Medium
Find Similar
Published Mar 25, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.

CVSS Details

Base Score
4.7
Exploitability
1.0
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
0.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-362

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥4.20  –  <6.6.136
linuxlinux_kernel*≥6.7  –  <6.12.82
linuxlinux_kernel*≥6.13  –  <6.18.17
linuxlinux_kernel*≥6.19  –  <6.19.7
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5
    Patch