VDB
CVE-2026-23302
CVE-2026-23302
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.
EPSS 0.01% · 2.6th percentile
Risk Scores
EPSS Score
0.01%
2.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | *, 7.0-rc3, 6.18.17 |
| linux | linux_kernel | 4.20, 4.20, 4.20 |
Exploit Intelligence
- https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5 (circl)
- https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 (circl)
- https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300 (circl)
- glcve_test.go (github-poc)
- glcve_test.go (github-poc)
- glcve_test.go (github-poc)
- glcve_test.go (github-poc)
Timeline
- Mar 25, 2026 EPSS Score
- Mar 25, 2026 Coalition ESS Score
- Mar 25, 2026 CVE Published
- Mar 29, 2026 Security Advisory
- Apr 27, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
References
- https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5 url
- https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23 url
- https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-23302 advisory
- https://lists.debian.org/debian-security-announce/2026/msg00154.html advisory
- https://lists.debian.org/debian-security-announce/2026/msg00148.html advisory