CVE-2026-64435

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Data races occur in the audit system when multiple readers access audit queue.qlen via the skb queue len() function without holding the queue lock or using READ ONCE(). Simultaneously, kauditd writes to this field through the skb dequeue() and skb unlink() path using WRITE ONCE() protected by a spinlock. The affected call sites include the wait event freezable() condition in kauditd thread(), the AUDIT GET handler in audit receive msg(), the backlog check in audit receive(), and the backlog check and pr warn() in audit log start().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.