CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets
Published Jun 24, 2026
·Updated
afunix: Reject SIOCATMARK on non-stream sockets
Affected Software
10 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=5.15<5.15.211
Linux Linux kernel>=5.16<6.1.177
Linux Linux kernel>=6.2<6.6.144
Linux Linux kernel>=6.7<6.12.88
Linux Linux kernel>=6.13<6.18.30
Linux Linux kernel>=6.19<7.0.7
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Microsoft azl3 kernel 6.6.143.1-1<6.6.144.1-1
6.6.144.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.144.1-1
Event History
Jun 24, 2026
CVE Published
via MITRE·07:14 AM
Data Sourced
via MITRE·07:14 AM
Description
Data Sourced
via NVD·08:16 AM
RemedyDescriptionSeverityAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:16 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:16 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2026-52928?
CVE-2026-52928 has a severity rating of 5.
2
How do I fix CVE-2026-52928?
To fix CVE-2026-52928, ensure you update to the latest Linux kernel version where this vulnerability has been patched.
3
What does CVE-2026-52928 affect?
CVE-2026-52928 affects the Linux kernel, specifically related to the handling of SIOCATMARK on non-stream sockets.
4
What is SIOCATMARK in the context of CVE-2026-52928?
In the context of CVE-2026-52928, SIOCATMARK is a socket option used to check if a receive queue is at the urgent mark for out-of-band data.
5
Is CVE-2026-52928 related to socket types in Linux?
Yes, CVE-2026-52928 specifically pertains to the rejection of SIOCATMARK on non-stream sockets in the Linux kernel's AF_UNIX implementation.