CVE-2026-23302

A flaw was found in the Linux kernel. This vulnerability involves data races within the networking subsystem, specifically related to how network socket pointers are handled concurrently by multiple central processing units (CPUs). Without proper synchronization, this concurrent access can lead to unpredictable system behavior.

This is a theoretical data race in socket callback pointer handling (sk_data_ready, sk_write_space) for UDP, TCP, and AF_UNIX sockets. The fix adds READ_ONCE()/WRITE_ONCE() annotations to ensure proper memory ordering. While technically a data race, no practical security impact or crash has been demonstrated; this is primarily a correctness fix for concurrent access patterns.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.