Linux Kernel Vulnerability in Unix Stream Handling

CVE-2026-98394

What is CVE-2026-98394?

A vulnerability in the Linux kernel's handling of unix_stream_read_generic() creates a busy-wait condition when using the recv function with MSG_PEEK on a zero-length buffer. This is triggered during blocking operations when the last socket buffer contains out-of-band (OOB) data. Consequently, the TCP stack may return immediately with zero data, potentially disrupting normal operation and leading to performance degradation.

References