Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Fahad Alharbi reported that recv(0, MSG_PEEK) triggers busy-wait in unix_stream_read_generic() if recv() is blocking and the last skb in the queue is MSG_OOB skb. In such a situation, TCP returns 0 immediately regardless of blocking or non-blocking. Let's follow the behaviour.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 314001f0bf927015e459c9d387d62a231fe93af3 before 3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713; affected 314001f0bf927015e459c9d387d62a231fe93af3 before d5dd55b316ca229a4cbf11729483ba5bb57233e7; affected 314001f0bf927015e459c9d387d62a231fe93af3 before c81c5be3826c8467945b964d0cf7f7b3d65461db; affected 314001f0bf927015e459c9d387d62a231fe93af3 before 6e5ee08eb5858d175da6768d75d163817b6a9d4a |
| Linux / Linux | affected 5.15; unaffected 0 before 5.15; unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2.7 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.