Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23302

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6aa7d6d7dacae63cf1e4aa99f6134adc18cd58bbe8b86e93eeb5fb817084d9e8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/skmsg.c","net/ipv4/tcp.c","net/ipv4/tcp_bpf.c","net/ipv4/tcp_input.c","net/ipv4/tcp_minisocks.c","net/ipv4/udp.c","net/ipv4/udp_bpf.c","net/unix/af_unix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"279f2b67d1c44ee139bd3fdb221850daa9358449","status":"affected","version":"604326b41a6fb9b4a78b6179335decee0365cd8c","versionType":"git"},{"lessThan":"7ad01905831c815520f1b0486336a03bb7420465","status":"affected","version":"604326b41a6fb9b4a78b6179335dece…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/skmsg.c","net/ipv4/tcp.c","net/ipv4/tcp_bpf.c","net/ipv4/tcp_input.c","net/ipv4/tcp_minisocks.c","net/ipv4/udp.c","net/ipv4/udp_bpf.c","net/unix/af_unix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.177","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/skmsg.c","net/ipv4/tcp.c","net/ipv4/tcp_bpf.c","net/ipv4/tcp_input.c","net/ipv4/tcp_minisocks.c","net/ipv4/udp.c","net/ipv4/udp_bpf.c","net/unix/af_unix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"279f2b67d1c44ee139bd3fdb221850daa9358449","status":"affected","version":"604326b41a6fb9b4a78b6179335decee0365cd8c","versionType":"git"},{"lessThan":"7ad01905831c815520f1b0486336a03bb7420465","status":"affected","version":"604326b41a6fb9b4a78b6179335dece…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/skmsg.c","net/ipv4/tcp.c","net/ipv4/tcp_bpf.c","net/ipv4/tcp_input.c","net/ipv4/tcp_minisocks.c","net/ipv4/udp.c","net/ipv4/udp_bpf.c","net/unix/af_unix.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.177","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/279f2b67d1c44ee139bd3fdb221850daa9358449"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b3f0a7d6dd1f54a1a8307fdf66440280fb8e4d7199f268ad4ccf54f00ef87512 · sha256:29b264f92ef413a0… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer