CVE-2026-52928

af_unix: Reject SIOCATMARK on non-stream sockets

MEDIUM

5.5

CVSS Score

Published: June 24, 2026 at 07:14 AM UTC

Updated: October 15, 2026 at 02:19 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive queue is at the urgent mark for MSG_OOB. In AF_UNIX, MSG_OOB is supported only for SOCK_STREAM sockets. SOCK_DGRAM and SOCK_SEQPACKET reject MSG_OOB in sendmsg() and recvmsg(), so they should not support SIOCATMARK either. Return -EOPNOTSUPP for non-stream sockets before checking the receive queue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.15 ≤ v < 5.15.2115.16 ≤ v < 6.1.1776.13 ≤ v < 6.18.306.19 ≤ v < 7.0.76.2 ≤ v < 6.6.1446.7 ≤ v < 6.12.88314001f0bf927015e459c9d387d62a231fe93af37.1 7.1 rc1 7.1 rc2

Vendor states this is fixed in 3147ddf5a41c20c45c2eb69e00b62f10f822056a (fixed)

Vendor states this is fixed in 645b1ed3259af38b7814242a420bc2081bdd1eb6 (fixed)

Vendor states this is fixed in b741c9c6ef59f17c1f104ddf1217ef77f79ed29b (fixed)

Vendor states this is fixed in c34c41446acf6c0d13b5b06c809be11e0f7f2729 (fixed)

Vendor states this is fixed in d119775f2bad827edc28071c061fdd4a91f889a5 (fixed)

Vendor states this is fixed in ec123873fdc83e7244c8ed6d17b8f8ea6c416a67 (fixed)

Vendor states this is fixed in f085971de6d6b8ef946a5e0bcd73ff24509a0f85 (fixed)

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 5.15.211 (unaffected)

Vendor states this is fixed in 6.1.177 (unaffected)

Vendor states this is fixed in 6.12.88 (unaffected)

Vendor states this is fixed in 6.18.30 (unaffected)