Threats tagged 'ghsa-6qfx-pmxg-8gxp'

A vulnerability in the Linux kernel's AF_UNIX socket implementation related to SOCKMAP handling has been resolved. The issue involves inflight file descriptors being hidden from garbage collection, leading to memory leaks and a use-after-free condition. This flaw could cause incorrect file descriptor counts and potential kernel memory corruption. The vulnerability is tracked as CVE-2026-53005 and has a high severity score of 7.8. A patch is available to drop all SCM attributes before passing skb to the SOCKMAP layer, mitigating the issue.