net/iucv: fix locking in .getsockopt

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-64004
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-07-19 16:17:40 UTC
Updated2026-07-20 15:17:01 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: net/iucv: fix locking in .getsockopt Mirror iucv_sock_setsockopt() and wrap the whole switch in lock_sock()/release_sock(). The pre-existing SO_MSGLIMIT-only lock becomes redundant and is removed. Any AF_IUCV HIPER user can potentially crash the kernel by racing recvmsg() with getsockopt(SO_MSGSIZE): the SO_MSGSIZE arm dereferences iucv->hs_dev->mtu after iucv_sock_close() (called from the racing recvmsg()) has set hs_dev to NULL, producing a NULL pointer dereference oops.

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001760000 probability, percentile 0.073890000 (date 2026-07-20)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 884eb247b74d86db97e3a37f0d6fc8e1e83590dd git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 45bb8de8c95d8899f4b8f61bd9bceb8132af73cb git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 1fc30bd4e55e2dd622d2d366cecd732c1841bbee git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 cd691beafea0dd779e69e81ccc26b0ab50efcb5e git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 6e792b8dd3002bbc4136745928a9605df1a72b8a git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 9817369243380e287ebe5525411557eaa3aa2a79 git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 69554adc7a6fa04ede3ad7512321d83748e3c920 git Not specified
CNA Linux Linux affected 51363b8751a673a00ad48eea895266396d53fa52 3589d20a666caf30ad100c960a2de7de390fce88 git Not specified
CNA Linux Linux affected 3.4 Not specified
CNA Linux Linux unaffected 3.4 semver Not specified
CNA Linux Linux unaffected 5.10.259 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.210 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.176 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.143 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.93 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.35 6.18.* semver Not specified
CNA Linux Linux unaffected 7.0.12 7.0.* semver Not specified
CNA Linux Linux unaffected 7.1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/3589d20a666caf30ad100c960a2de7de390fce88 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/884eb247b74d86db97e3a37f0d6fc8e1e83590dd 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/cd691beafea0dd779e69e81ccc26b0ab50efcb5e 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6e792b8dd3002bbc4136745928a9605df1a72b8a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/69554adc7a6fa04ede3ad7512321d83748e3c920 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/9817369243380e287ebe5525411557eaa3aa2a79 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1fc30bd4e55e2dd622d2d366cecd732c1841bbee 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/45bb8de8c95d8899f4b8f61bd9bceb8132af73cb 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report