CVE-2026-64109

CVE-2026-64109 describes a Use-After-Free in the Linux kernel af_unix unix_stream_data_wait() due to peeking tail of the receive queue without proper locking, allowing a race between threads to free a skb while it is referenced. The issue arises because tail is compared to last after a race where...

CVE-2026-64109 af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

PT-2026-61426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the af unix module. The unix stream data wait function calls skb peek tail on the sk-sk receive queue without holding a lock to prevent Socket Buffer...