https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:52:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31673 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>af_unix: read UNIX_DIAG_VFS data under unix_state_lock</p> <p>Exact UNIX diag lookups hold a reference to the socket, but not to u-&gt;path. Meanwhile, unix_release_sock() clears u-&gt;path under unix_state_lock() and drops the path reference after unlocking.</p> <p>Read the inode and device numbers for UNIX_DIAG_VFS while holding unix_state_lock(), then emit the netlink attribute after dropping the lock.</p> <p>This keeps the VFS data stable while the reply is being built.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>af_unix: read UNIX_DIAG_VFS data under unix_state_lock</p> <p>Exact UNIX diag lookups hold a reference to the socket, but not to u-&gt;path. Meanwhile, unix_release_sock() clears u-&gt;path under unix_state_lock() and drops the path reference after unlocking.</p> <p>Read the inode and device numbers for UNIX_DIAG_VFS while holding unix_state_lock(), then emit the netlink attribute after dropping the lock.</p> <p>This keeps the VFS data stable while the reply is being built.</p> https://vulnerability.circl.lu/vuln/cve-2026-31673