CVE-2026-23394: af_unix: Give up GC if MSG_PEEK intervened.
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.257-1Fixed in 7.0.9-1Fixed in 7.0.10-1 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Patch af_unix: Give up GC if MSG_PEEK intervened
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23394?
CVE-2026-23394 has been categorized with a medium severity level due to its potential impact on socket communication in the Linux kernel.
How do I fix CVE-2026-23394?
To fix CVE-2026-23394, you should update your Linux kernel to the latest version that includes the patch addressing this vulnerability.
Which versions of the Linux kernel are affected by CVE-2026-23394?
CVE-2026-23394 affects versions of the Linux kernel using the af_unix family for socket communications.
What is the impact of CVE-2026-23394?
The impact of CVE-2026-23394 involves race conditions that may lead to improper garbage collection on alive sockets, potentially causing data loss.
Who reported CVE-2026-23394?
CVE-2026-23394 was reported by Igor Ushakov after discovering an issue with garbage collection and MSG_PEEK interactions in the Linux kernel.