CVE-2026-80733

net: remove WARN_ON_ONCE() from sk_mc_loop()

State: Published
Severity: Not scored
Published: Sep 3, 2026
Updated: Sep 3, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: remove WARN_ON_ONCE() from sk_mc_loop()

sk_mc_loop() can be called for sockets that are neither AF_INET nor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet socket over virtual devices such as VRF or ipvlan).

In such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls through the switch statement and triggers WARN_ON_ONCE(1).

Non-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP options, so loopback should default to true without generating a warning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before 97133c4d42654578fab95abe47359ebe784dde18Affected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before f625c742b33dc137c209dd13d1c5f12b1c18d71cAffected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before ad7fa2f411cb30f63d6725f111be134064cdb718Affected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before d2adc4e80b29e58b5162ae09f0f657a215806c8cAffected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfeAffected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before c8f256dc849205ccb2bd78bd99a3497b972b44e0Affected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before 0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1fAffected f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before b8a39a09ae4eaae04309e1e38ed6a1101d967496Affected c91f81773cd4bbebfe744e9ab30a7ce093f9b930Affected c8c30b2b17f2133e953850c547e3902c3a3d80e2Affected 3fe207e4637a2e792c46a08666aa722f77d7f8f7Affected 3.14.40 to before 3.15Affected 3.18.13 to before 3.19Affected 3.19.6 to before 3.20Affected
LinuxLinux	4.0Affected before 4.0Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.152 through 6.6.Not affected 6.12.104 through 6.12.Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before 97133c4d42654578fab95abe47359ebe784dde18Affected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before f625c742b33dc137c209dd13d1c5f12b1c18d71cAffected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before ad7fa2f411cb30f63d6725f111be134064cdb718Affected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before d2adc4e80b29e58b5162ae09f0f657a215806c8cAffected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfeAffected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before c8f256dc849205ccb2bd78bd99a3497b972b44e0Affected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before 0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1fAffected
f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 to before b8a39a09ae4eaae04309e1e38ed6a1101d967496Affected
c91f81773cd4bbebfe744e9ab30a7ce093f9b930Affected
c8c30b2b17f2133e953850c547e3902c3a3d80e2Affected
3fe207e4637a2e792c46a08666aa722f77d7f8f7Affected
3.14.40 to before 3.15Affected
3.18.13 to before 3.19Affected
3.19.6 to before 3.20Affected

LinuxLinux

4.0Affected
before 4.0Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.152 through 6.6.*Not affected
6.12.104 through 6.12.*Not affected
6.18.45 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.