CVE-2026-23302

Katalog CVE

CVSS 4.7 · Medium EPSS 0,09%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.

Rincian

Terbit di NVD

25 Maret 2026

Terakhir diubah

4 Juli 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,09% peluang dieksploitasi; lebih tinggi dari 0,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 patch
• https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300 patch
• https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465 patch
• https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab patch
• https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5 patch
• https://git.kernel.org/stable/c/279f2b67d1c44ee139bd3fdb221850daa9358449