Race Condition in Linux Kernel Affects Socket State Management
CVE-2026-23394
What is CVE-2026-23394?
A race condition vulnerability exists in the Linux kernel related to socket management. Specifically, the issue arises when MSG_PEEK is used in conjunction with socket garbage collection (GC). When a socket is closed while a simultaneous MSG_PEEK operation is taking place, the GC may incorrectly assess the state of the closing socket, leading to an erroneous conclusion that both the original and the receiving socket are dead. This can result in unintended consequences in socket handling and memory management. Proper signaling via memory barriers during MSG_PEEK can mitigate the race condition without the need for heavy locking mechanisms.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux 118f457da9ed58a79e24b73c2ef0aa1987241f0e < 37dd7ab332396eb8dd80b2dc7ea4b61abf767436
Linux 118f457da9ed58a79e24b73c2ef0aa1987241f0e
Linux 61a75360dca93c945ef6bd757f8b8a96f39b77cb