CVE-2026-23302

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk-skdataready,writespace skmsg and probably other layers are changing these pointers while other cpus might read them concurrently. Add corresponding READONCE/WRITEONCE annotations for UDP, TCP an...

CVE-2026-23299

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: purge error queues in socket destructors When TX timestamping is enabled via SOTIMESTAMPING, SKBs may be queued into skerrorqueue and will stay there until consumed. If userspace never gets to read the timestamps, or i...

CVE-2026-23302 net: annotate data-races around sk->sk_{data_ready,write_space}

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk-skdataready,writespace skmsg and probably other layers are changing these pointers while other cpus might read them concurrently. Add corresponding READONCE/WRITEONCE annotations for UDP, TCP an...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from data competition between the sk-skdataready and sk-skwritespace pointers...

CVE-2026-4588

The CVE affects kalcaddle kodbox 1.64, specifically the Site-level API key Handler via the function shareSafeGroup in /workspace/source-code/app/controller/explorer/shareOut.class.php. The root cause is manipulation of the argument sk which leads to the use of a hard-coded cryptographic key. The ...

CVE-2026-20016

creationtimestamp| type| source ---|---|--- 2026-03-04 20:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb5jqlddb2n...

CVE-2021-35485

creationtimestamp| type| source ---|---|--- 2026-03-03 20:15:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6liq3m342v...

CVE-2026-29093

creationtimestamp| type| source ---|---|--- 2026-03-03 16:21:28+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-xxpw-32hf-q8v9 2026-03-06 04:00:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeggsufiv2n 2026-03-06 08:15:28+00:00| seen|...

UBUNTU-CVE-2026-23120

In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tptunneldelwork We should read sk-sksocket only when dealing with kernel sockets. syzbot reported the following data-race: BUG: KCSAN: data-race in l2tptunneldelwork / skcommonrelease write to...

AZL-75150 CVE-2025-71148 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshakereqsubmit replaces sk-skdestruct but never restores it when submission fails before the request is hashed. handshakeskdestruct then returns early and the original...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004875 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: fix strpinit order and cleanup strpinit is called just a few lines above this csk-skuserdata...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36972)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36972 advisory. - In the Linux kernel, the following vulnerability has been resolved: afunix: Update unixsksk-oobskb under...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003628 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003846 advisory. In the Linux kernel before 5.5.8, getrawsocket in drivers/vhost/net.c lacks validation of an skfamily field, which might allow attackers to trigger kernel stack...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000506 advisory. In the Linux kernel before 5.5.8, getrawsocket in drivers/vhost/net.c lacks validation of an skfamily field, which might allow attackers to trigger kernel stack...

CVE-2025-39484

creationtimestamp| type| source ---|---|--- 2026-01-05 17:17:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowyjoq472u 2026-01-05 17:18:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbowztoynb2e 2026-01-05 17:19:17+00:00| seen|...

PT-2026-27667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race occurs in the network subsystem when skmsg or other layers modify the sk data ready and sk write space pointers while other CPUs read them concurrently. Recommendations At th...

CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

SUSE CVE-2023-54218

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

SUSE CVE-2023-54226

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data races around sk-skshutdown. KCSAN found a data race around sk-skshutdown where unixreleasesock and unixshutdown update it under unixstatelock, OTOH unixpoll and unixdgrampoll read it locklessly. We need to annota...