Medium 4.7Published Mar 25, 2026

CVE-2026-23302net: annotate data-races around sk->sk_{data_ready,write_space}

Updated under an hour ago (Oct 27, 2026, 6:50 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: annotate data-races around sk->sk_{data_ready,write_space} skmsg (and probably other layers) are changing these pointers while other cpus might read them concurrently. Add corresponding READ_ONCE()/WRITE_ONCE() annotations for UDP, TCP and AF_UNIX.

CVSS: 4.7 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	604326b41a6fb9b4a78b6179335decee0365cd8c builds before 279f2b67d1c44ee139bd3fdb221850daa9358449; 604326b41a6fb9b4a78b6179335decee0365cd8c builds before 7ad01905831c815520f1b0486336a03bb7420465; from 604326b41a6fb9b4a78b6179335decee0365cd8c before c494448bb522bbbb63096540eb2319101a0480ab; from 604326b41a6fb9b4a78b6179335decee0365cd8c before f17c1c4acbe2bd702abce73a847a04a196fab2c5; 604326b41a6fb9b4a78b6179335decee0365cd8c builds before 27fccdbcbbfc4651b6f66756e6fa3f52e051ec23; 604326b41a6fb9b4a78b6179335decee0365cd8c builds before 2ef2b20cf4e04ac8a6ba68493f8780776ff84300	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.20 before 6.6.136; from 6.7 before 6.12.82; from 6.13 before 6.18.17; from 6.19 before 6.19.7; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/279f2b67d1c44ee139bd3fdb221850daa9358449
https://git.kernel.org/stable/c/7ad01905831c815520f1b0486336a03bb7420465	patch
https://git.kernel.org/stable/c/c494448bb522bbbb63096540eb2319101a0480ab	patch
https://git.kernel.org/stable/c/f17c1c4acbe2bd702abce73a847a04a196fab2c5	patch
https://git.kernel.org/stable/c/27fccdbcbbfc4651b6f66756e6fa3f52e051ec23	patch
https://git.kernel.org/stable/c/2ef2b20cf4e04ac8a6ba68493f8780776ff84300	patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.