CVE-2026-64109

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the af unix module. The unix stream data wait() function calls skb peek tail() on the sk->sk receive queue without holding a lock to prevent Socket Buffer (SKB) structures from being dequeued and freed. In a race condition between a peeking recv() and a normal recv() on the same socket, the tail pointer may refer to an SKB that has already been freed. This leads to a UAF when the function attempts to access the tail->len variable. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.