7 matches found
CVE-2026-53361
A flaw was found in the Linux kernel's afunix component. A race condition exists within the unixgc garbage collection function where the gcinprogress flag may not be correctly set. This could lead to unixpeekfpl misinterpreting garbage collection status when handling MSGPEEK operations, potential...
UBUNTU-CVE-2026-53361
In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...
CVE-2026-53361
In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001771)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001771 advisory. iouring UAF, Unix SCM garbage collection Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414439)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414439 advisory. iouring UAF, Unix SCM garbage collection Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has...
AZL-48813 CVE-2024-36972 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: afunix: Update unixsksk-oobskb under skreceivequeue lock. Billy Jheng Bing-Jhong reported a race between unixgc and queueoob. unixgc tries to garbage-collect closed inflight sockets, and then if the socket has MSGOOB in...
SUSE CVE-2024-26750
In the Linux kernel, the following vulnerability has been resolved: afunix: Drop oobskb ref before purging queue in GC. syzbot reported another task hung in unixgc. 0 The current while loop assumes that all of the left candidates have oobskb and calling kfreeskboobskb releases the remaining...