af_unix: Reject SIOCATMARK on non-stream sockets
In the Linux kernel, the following vulnerability has been resolved: af_unix: Reject SIOCATMARK on non-stream sockets SIOCATMARK reports whether the receive queue is at the urgent mark for MSG_OOB. In AF_UNIX, MSG_OOB is supported only for SOCK_STREAM sockets. SOCK_DGRAM and SOCK_SEQPACKET reject MSG_OOB in sendmsg() and recvmsg(), so they should not support SIOCATMARK either. Return -EOPNOTSUPP for non-stream sockets before checking the receive queue.
CVE-2026-52928
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-52928
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "ec123873fdc83e7244c8ed6d17b8f8ea6c416a67",
"versionType": "git"
},
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "f085971de6d6b8ef946a5e0bcd73ff24509a0f85",
"versionType": "git"
},
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "b741c9c6ef59f17c1f104ddf1217ef77f79ed29b",
"versionType": "git"
},
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "645b1ed3259af38b7814242a420bc2081bdd1eb6",
"versionType": "git"
},
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "c34c41446acf6c0d13b5b06c809be11e0f7f2729",
"versionType": "git"
},
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "3147ddf5a41c20c45c2eb69e00b62f10f822056a",
"versionType": "git"
},
{
"status": "affected",
"version": "314001f0bf927015e459c9d387d62a231fe93af3",
"lessThan": "d119775f2bad827edc28071c061fdd4a91f889a5",
"versionType": "git"
}
],
"programFiles": [
"net/unix/af_unix.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.15"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.15",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.15.211",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.177",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.144",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.88",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.30",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.0.7",
"versionType": "semver",
"lessThanOrEqual": "7.0.*"
},
{
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/unix/af_unix.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-52928
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #28418 · Revision 1
- Added to Heist Feed
- Publisher date