CVE-2026-98394 is a vulnerability in Linux Kernel
Published on October 14, 2026
af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
Fahad Alharbi reported that recv(0, MSG_PEEK) triggers busy-wait
in unix_stream_read_generic() if recv() is blocking and the last
skb in the queue is MSG_OOB skb.
In such a situation, TCP returns 0 immediately regardless of
blocking or non-blocking.
Let's follow the behaviour.
Products Associated with CVE-2026-98394
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 314001f0bf927015e459c9d387d62a231fe93af3 and below 3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713 is affected.
- Version 314001f0bf927015e459c9d387d62a231fe93af3 and below d5dd55b316ca229a4cbf11729483ba5bb57233e7 is affected.
- Version 314001f0bf927015e459c9d387d62a231fe93af3 and below c81c5be3826c8467945b964d0cf7f7b3d65461db is affected.
- Version 314001f0bf927015e459c9d387d62a231fe93af3 and below 6e5ee08eb5858d175da6768d75d163817b6a9d4a is affected.
- Version 5.15 is affected.
- Before 5.15 is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2.7, <= 7.2.* is unaffected.
- Version 7.3-rc3, <= * is unaffected.