CVE-2026-68338

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the net/packet component during the execution of the packet set ring() function. When reconfiguring a ring, the function temporarily detaches a socket from packet delivery by recording the running state, clearing po->num, and unregistering the protocol hook. A race condition occurs if a NETDEV UNREGISTER event happens during the unlocked window. The notifier may observe the socket as not running and invalidate the per-socket binding by setting po->ifindex to -1 and clearing po->prot hook.dev. If the process resumes and re-registers the hook based on a stale was running state, the fanout hook may be re-added even after the device has been unregistered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.