vulnti.work

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one dat…

Medium CVSS 4.7
CVECVE-2024-38596
First seen2026-10-15 07:15 UTC
Disclosed2024-06-19 14:15 UTC
Last updated2026-10-15 07:15 UTC
Channel statusauto

Summary

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writes to sk->sk_shutdown using WRITE_ONCE. However, on the reader side, unix_stream_sendmsg() does not read it atomically. Consequently, this issue is causing the following KCSAN splat to occur: BUG: KCSAN: data-race in unix_release_sock /…

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD