af unix

The tag 'af unix' covers Linux kernel vulnerabilities and patches related to AF_UNIX (Unix domain sockets), a high-performance local IPC mechanism used by system daemons, desktop services, container runtimes, and applications. Discussions focus on use-after-free and null-pointer dereference races in the unix_stream_sendpath function, triggered by crafted local socket operations and file-descriptor passing. These flaws can cause kernel oops, crashes, denial-of-service, or support local privilege escalation chains. Patches involve locking corrections to prevent lockless access to peer receive queues, backported by vendors. Microsoft's Azure Linux distribution is noted as potentially affected by one such CVE, with advisory and VEX attestation details provided.