CVE-2026-23302: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.

Засегнати продукти

• Linux Linux: 604326b41a6fb9b4a78b6179335decee0365cd8c преди 279f2b67d1c44ee139bd3fdb221850daa9358449; 604326b41a6fb9b4a78b6179335decee0365cd8c преди 7ad01905831c815520f1b0486336a03bb7420465; 604326b41a6fb9b4a78b6179335decee0365cd8c преди c494448bb522bbbb63096540eb2319101a0480ab; 604326b41a6fb9b4a78b6179335decee0365cd8c преди f17c1c4acbe2bd702abce73a847a04a196fab2c5; 604326b41a6fb9b4a78b6179335decee0365cd8c преди 27fccdbcbbfc4651b6f66756e6fa3f52e051ec23; 604326b41a6fb9b4a78b6179335decee0365cd8c преди 2ef2b20cf4e04ac8a6ba68493f8780776ff84300
• Linux Linux: 4.20; преди 4.20; 6.1.177 до 6.1.*; 6.6.136 до 6.6.*; 6.12.82 до 6.12.*; 6.18.17 до 6.18.*; 6.19.7 до 6.19.*; от 7.0 нататък
• Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: всички версии

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23302
• https://nvd.nist.gov/vuln/detail/CVE-2026-23302
• https://git.kernel.org/stable/c/279f2b67d1c44ee139bd3fdb221850daa9358449
• https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465
• https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab
• https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5
• https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23
• https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300
• https://cert-portal.siemens.com/productcert/html/ssa-784472.html