CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue
audit: Fix data races of skbqueuelen() readers on auditqueue
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch audit: Fix data races of skb_queue_len() readers on audit_queue
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems running an affected Linux kernel with the audit subsystem in use are exposed. The issue concerns concurrent access to the audit queue length by audit-related kernel paths.
Does exploitation require local access, authentication, or user interaction?
No. The supplied CVSS vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.
What is the expected impact?
The CVSS vector indicates high availability impact and low integrity impact, with no confidentiality impact. The underlying flaw is a race condition involving audit_queue.qlen accesses.
What should be done if patching cannot happen immediately?
The provided data identifies a patch as available, but does not provide a documented workaround or mitigation. Prioritize applying the available kernel patch.