CVE-2026-98394: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Fahad Alharbi reported that recv(0, MSG_PEEK) triggers busy-wait in unix_stream_read_generic() if recv() is blocking and the last skb in the queue is MSG_OOB skb. In such a situation, TCP returns 0 immediately regardless of blocking or non-blocking. Let's follow the behaviour.

Засегнати продукти

• Linux Linux: 314001f0bf927015e459c9d387d62a231fe93af3 преди 3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713; 314001f0bf927015e459c9d387d62a231fe93af3 преди d5dd55b316ca229a4cbf11729483ba5bb57233e7; 314001f0bf927015e459c9d387d62a231fe93af3 преди c81c5be3826c8467945b964d0cf7f7b3d65461db; 314001f0bf927015e459c9d387d62a231fe93af3 преди 6e5ee08eb5858d175da6768d75d163817b6a9d4a
• Linux Linux: 5.15; преди 5.15; 6.12.111 до 6.12.*; 6.18.53 до 6.18.*; 7.2.7 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98394
• https://nvd.nist.gov/vuln/detail/CVE-2026-98394
• https://git.kernel.org/stable/c/3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713
• https://git.kernel.org/stable/c/d5dd55b316ca229a4cbf11729483ba5bb57233e7
• https://git.kernel.org/stable/c/c81c5be3826c8467945b964d0cf7f7b3d65461db
• https://git.kernel.org/stable/c/6e5ee08eb5858d175da6768d75d163817b6a9d4a