In the Linux kernel, the following vulnerability has been resolved:
net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
KCSAN found a data race in sock_recv_cmsgs() where the read access to sk->sk_stamp needs READ_ONCE().
BUG: KCSAN: data-race in packet_recvmsg / packet_recvmsg
write (marked) to 0xffff88803c81f258 of 8 bytes by task 19171 on cpu 0: sock_write_timestamp include/net/sock.h:2670 [inline] sock_recv_cmsgs include/net/sock.h:2722 [inline] packet_recvmsg+0xb97/0xd00 net/packet/af_packet.c:3489 sock_recvmsg_nosec net/socket.c:1019 [inline] sock_recvmsg+0x11a/0x130 net/socket.c:1040 sock_read_iter+0x176/0x220 net/socket.c:1118 call_read_iter include/linux/fs.h:1845 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x5e0/0x630 fs/read_write.c:470 ksys_read+0x163/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x41/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x72/0xdc
read to 0xffff88803c81f258 of 8 bytes by task 19183 on cpu 1: sock_recv_cmsgs include/net/sock.h:2721 [inline] packet_recvmsg+0xb64/0xd00 net/packet/af_packet.c:3489 sock_recvmsg_nosec net/socket.c:1019 [inline] sock_recvmsg+0x11a/0x130 net/socket.c:1040 sock_read_iter+0x176/0x220 net/socket.c:1118 call_read_iter include/linux/fs.h:1845 [inline] new_sync_read fs/read_write.c:389 [inline] vfs_read+0x5e0/0x630 fs/read_write.c:470 ksys_read+0x163/0x1a0 fs/read_write.c:613 __do_sys_read fs/read_write.c:623 [inline] __se_sys_read fs/read_write.c:621 [inline] __x64_sys_read+0x41/0x50 fs/read_write.c:621 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x72/0xdc
value changed: 0xffffffffc4653600 -> 0x0000000000000000
Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 19183 Comm: syz-executor.5 Not tainted 6.3.0-rc7-02330-gca6270c12e20 #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.184-174.730Upgrade python-perfUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.117-72.142Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perfUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade bpftool | Feb 20, 2026 | Dec 30, 2025 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-realtimeUpgrade linux-ibm-5.4Upgrade linux-azureUpgrade linux-iotUpgrade linuxUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-oracle-5.4Upgrade linux-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-azure-fipsUpgrade linux-nvidia-tegraUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-ibm-5.15Upgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-aws-5.15 | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub