CVE-2026-23302

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23302
In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 Patch
https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300 Patch
https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465 Patch
https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab Patch
https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
History

28 May 2026, 14:42

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 - () https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 - Patch
References () https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300 - () https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300 - Patch
References () https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465 - () https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465 - Patch
References () https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab - () https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab - Patch
References () https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5 - () https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
CWE CWE-362
First Time Linux
Linux linux Kernel

27 Apr 2026, 14:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465 -

18 Apr 2026, 09:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab -
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: net: anotar condiciones de carrera de datos alrededor de sk->sk_{data_ready,write_space} skmsg (y probablemente otras capas) están cambiando estos punteros mientras otras CPUs podrían leerlos concurrentemente. Añadir las correspondientes anotaciones READ_ONCE()/WRITE_ONCE() para UDP, TCP y AF_UNIX.

25 Mar 2026, 11:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-25 11:16

Updated : 2026-05-28 14:42

NVD link : CVE-2026-23302

Mitre link : CVE-2026-23302

CVE.ORG link : CVE-2026-23302

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')