CVE-2026-31673

Katalog CVE

CVSS 7.8 · High EPSS 0,18%

Kerentanan pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: af_unix: read UNIX_DIAG_VFS data under unix_state_lock Exact UNIX diag lookups hold a reference to the socket, but not to u->path. Meanwhile, unix_release_sock() clears u->path under unix_state_lock() and drops the path reference after unlocking. Read the inode and device numbers for UNIX_DIAG_VFS while holding unix_state_lock(), then emit the netlink attribute after dropping the lock. This keeps the VFS data stable while the reply is being built.

Rincian

Terbit di NVD

25 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0c739f3785f84af695952c2bac8be2f45082c9b8 patch
• https://git.kernel.org/stable/c/39897df386376912d561d4946499379effa1e7ef patch
• https://git.kernel.org/stable/c/900a4e0910e98b8caef117d5df00471fa438dcf9 patch
• https://git.kernel.org/stable/c/b9232421a77a649c9376c99fdfc8cb7f79cad34c patch
• https://git.kernel.org/stable/c/bdf206e740bf2919d818f132c8c9cc7ed91d11c0 patch
• https://git.kernel.org/stable/c/4f6a8f10182c3a9d22e8eb183957ae7ade9e4bf7
• https://git.kernel.org/stable/c/c3ec44ab4526bbc4b6c9fc845af86488244f4c9b
• https://git.kernel.org/stable/c/e7339db13b9ddb63417b12da55fd6191e59f7442