CVE-2026-52928

af_unix: Reject SIOCATMARK on non-stream sockets

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Oct 15, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Reject SIOCATMARK on non-stream sockets

SIOCATMARK reports whether the receive queue is at the urgent mark for MSG_OOB.

In AF_UNIX, MSG_OOB is supported only for SOCK_STREAM sockets. SOCK_DGRAM and SOCK_SEQPACKET reject MSG_OOB in sendmsg() and recvmsg(), so they should not support SIOCATMARK either.

Return -EOPNOTSUPP for non-stream sockets before checking the receive queue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	314001f0bf927015e459c9d387d62a231fe93af3 to before ec123873fdc83e7244c8ed6d17b8f8ea6c416a67Affected 314001f0bf927015e459c9d387d62a231fe93af3 to before f085971de6d6b8ef946a5e0bcd73ff24509a0f85Affected 314001f0bf927015e459c9d387d62a231fe93af3 to before b741c9c6ef59f17c1f104ddf1217ef77f79ed29bAffected 314001f0bf927015e459c9d387d62a231fe93af3 to before 645b1ed3259af38b7814242a420bc2081bdd1eb6Affected 314001f0bf927015e459c9d387d62a231fe93af3 to before c34c41446acf6c0d13b5b06c809be11e0f7f2729Affected 314001f0bf927015e459c9d387d62a231fe93af3 to before 3147ddf5a41c20c45c2eb69e00b62f10f822056aAffected 314001f0bf927015e459c9d387d62a231fe93af3 to before d119775f2bad827edc28071c061fdd4a91f889a5Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.211 through 5.15.Not affected 6.1.177 through 6.1.Not affected 6.6.144 through 6.6.Not affected 6.12.88 through 6.12.Not affected 6.18.30 through 6.18.Not affected 7.0.7 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

314001f0bf927015e459c9d387d62a231fe93af3 to before ec123873fdc83e7244c8ed6d17b8f8ea6c416a67Affected
314001f0bf927015e459c9d387d62a231fe93af3 to before f085971de6d6b8ef946a5e0bcd73ff24509a0f85Affected
314001f0bf927015e459c9d387d62a231fe93af3 to before b741c9c6ef59f17c1f104ddf1217ef77f79ed29bAffected
314001f0bf927015e459c9d387d62a231fe93af3 to before 645b1ed3259af38b7814242a420bc2081bdd1eb6Affected
314001f0bf927015e459c9d387d62a231fe93af3 to before c34c41446acf6c0d13b5b06c809be11e0f7f2729Affected
314001f0bf927015e459c9d387d62a231fe93af3 to before 3147ddf5a41c20c45c2eb69e00b62f10f822056aAffected
314001f0bf927015e459c9d387d62a231fe93af3 to before d119775f2bad827edc28071c061fdd4a91f889a5Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.211 through 5.15.*Not affected
6.1.177 through 6.1.*Not affected
6.6.144 through 6.6.*Not affected
6.12.88 through 6.12.*Not affected
6.18.30 through 6.18.*Not affected
7.0.7 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.