CVE-2026-23302: net: annotate data-races around sk->sk_{data_ready,write_space}
In the Linux kernel, the following vulnerability has been resolved:
net: annotate data-races around sk->sk{dataready,writespace}
skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently.
Add corresponding READONCE()/WRITEONCE() annotations for UDP, TCP and AFUNIX.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
Exploitation requires local access and low privileges; no user interaction is required. The affected code paths involve concurrent access to socket callback pointers in UDP, TCP, and AF_UNIX.
Which software is identified as affected?
The provided data identifies Linux kernel and Microsoft azl3 kernel 6.6.134.1-2 as affected software. It does not state whether any particular distribution or configuration is affected by default.
What is the underlying technical issue?
The issue is a race condition involving concurrent reads and updates of sk_data_ready and sk_write_space socket callback pointers. The resolution adds READ_ONCE()/WRITE_ONCE() annotations for the relevant UDP, TCP, and AF_UNIX accesses.