CVE-2026-23302: net: annotate data-races around sk->sk_{data_ready,write_space}

Published Mar 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

net: annotate data-races around sk->sk{dataready,writespace}

skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently.

Add corresponding READONCE()/WRITEONCE() annotations for UDP, TCP and AFUNIX.

Affected Software

8 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.134.1-2
Linux Linux kernel>=4.20<6.6.136
Linux Linux kernel>=6.7<6.12.82
Linux Linux kernel>=6.13<6.18.17
Linux Linux kernel>=6.19<6.19.7
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2

Event History

Mar 25, 2026
CVE Published
via MITRE·10:26 AM
Data Sourced
via MITRE·10:26 AM
Description
Data Sourced
via NVD·11:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Mar 26, 2026
Data Sourced
via Microsoft·08:05 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:05 AM
Affected Software
Updated
via Microsoft·08:05 AM
DescriptionSeverity

Frequently Asked Questions

1

What level of access does an attacker need?

Exploitation requires local access and low privileges; no user interaction is required. The affected code paths involve concurrent access to socket callback pointers in UDP, TCP, and AF_UNIX.

2

Which software is identified as affected?

The provided data identifies Linux kernel and Microsoft azl3 kernel 6.6.134.1-2 as affected software. It does not state whether any particular distribution or configuration is affected by default.

3

What is the underlying technical issue?

The issue is a race condition involving concurrent reads and updates of sk_data_ready and sk_write_space socket callback pointers. The resolution adds READ_ONCE()/WRITE_ONCE() annotations for the relevant UDP, TCP, and AF_UNIX accesses.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203