CVE-2026-98394
- Source
- https://cve.org/CVERecord?id=CVE-2026-98394
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98394.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-98394
- Downstream
- Published
- 2026-10-14T13:25:57Z
- Modified
- 2026-10-15T02:47:42Z
- Summary
- af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
Fahad Alharbi reported that recv(0, MSG_PEEK) triggers busy-wait in unix_stream_read_generic() if recv() is blocking and the last skb in the queue is MSG_OOB skb.
In such a situation, TCP returns 0 immediately regardless of blocking or non-blocking.
Let's follow the behaviour.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98394.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713
- https://git.kernel.org/stable/c/6e5ee08eb5858d175da6768d75d163817b6a9d4a
- https://git.kernel.org/stable/c/c81c5be3826c8467945b964d0cf7f7b3d65461db
- https://git.kernel.org/stable/c/d5dd55b316ca229a4cbf11729483ba5bb57233e7
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98394.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-98394
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced314001f0bf927015e459c9d387d62a231fe93af3Fixed3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713Fixedd5dd55b316ca229a4cbf11729483ba5bb57233e7Fixedc81c5be3826c8467945b964d0cf7f7b3d65461dbFixed6e5ee08eb5858d175da6768d75d163817b6a9d4a