CVE-2026-23394: af_unix: Give up GC if MSG_PEEK intervened.
Published Mar 25, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
14 affected componentsFixes available
Linux Linux kernel (AF_UNIX)
Linux Linux kernel>=6.1.141<6.2
Linux Linux kernel>=6.6.93<6.7
Linux Linux kernel>=6.10.1<6.18.23
Linux Linux kernel>=6.19<6.19.10
Linux Linux kernel=6.10
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6
Linux Linux kernel=7.0-rc7
debian/linux<=6.1.170-3, <=6.1.174-1, <=6.12.86-1, <=6.12.90-2
5.10.223-15.10.257-17.0.9-17.0.10-1
Remediation
Event History
Mar 25, 2026
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
Description
Data Sourced
via NVD·11:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 19, 2026
Data Sourced
via Launchpad·11:40 PM
Description
May 28, 2026
Data Sourced
via Ubuntu·02:55 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Debian·02:57 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-23394?
CVE-2026-23394 has been categorized with a medium severity level due to its potential impact on socket communication in the Linux kernel.
2
How do I fix CVE-2026-23394?
To fix CVE-2026-23394, you should update your Linux kernel to the latest version that includes the patch addressing this vulnerability.
3
Which versions of the Linux kernel are affected by CVE-2026-23394?
CVE-2026-23394 affects versions of the Linux kernel using the af_unix family for socket communications.
4
What is the impact of CVE-2026-23394?
The impact of CVE-2026-23394 involves race conditions that may lead to improper garbage collection on alive sockets, potentially causing data loss.
5
Who reported CVE-2026-23394?
CVE-2026-23394 was reported by Igor Ushakov after discovering an issue with garbage collection and MSG_PEEK interactions in the Linux kernel.