Linux Kernel Vulnerability in Phonet Socket Handling by Vendor

CVE-2026-53292

What is CVE-2026-53292?

A vulnerability in the Linux kernel's Phonet socket handling can lead to kernel panics when specific error conditions are met during socket binding. The function pn_socket_autobind() mistakenly triggers a BUG_ON assertion when it encounters an invalid bind error while the socket appears unbound. This mismanagement could allow user-triggerable crashes instead of returning a standard error code. By modifying the error handling approach, the kernel can handle erroneous states more gracefully, ensuring system stability and preventing unexpected crashes.

References