CVE-2026-31673

A flaw was found in the Linux kernel. A race condition in the af_unix component allows a local attacker to cause unstable Virtual File System (VFS) data when UNIX_DIAG_VFS data is handled. This occurs because inode and device numbers are read without consistently holding the unix_state_lock(), while u->path can be cleared. This instability could lead to information disclosure or a denial of service.

UNIX_DIAG_VFS dumps now run under unix_state_lock, closing races with concurrent unlink/bind. Red Hat treats this as a local diagnostics race in AF_UNIX.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.