A new Linux-kernel vulnerability tracked as CVE-2023-54082 has been recorded and fixed upstream: a null-pointer / use-after-free race in the AF_UNIX send path rooted in unix_stream_sendpage. The flaw can be triggered by a carefully orchestrated sequence of local socket/file-descriptor passing...
A subtle race in the Linux kernel's AF_UNIX code that allowed a kernel function to follow a freed pointer has been patched — the fix closes a null-pointer / use-after-free window in unix_stream_sendpage that could be triggered by carefully crafted local socket operations and file-descriptor...
The Linux kernel received a targeted fix for a use‑after‑free bug in the AF_UNIX socket handling code — tracked as CVE‑2025‑38236 — and Microsoft’s public advisory confirms that Azure Linux (the Azure Linux Distribution) is a known carrier of the upstream component that contained the bug and is...