CVE-2024-36972 af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting af_unix Published on February 18, 2026 Two vulnerabilities in the af_unix subsystem have been reported, identified as CVE-2025-38236 and CVE-2024-36972. CVE-2025-38236 was published on July 8, 2025, while CVE-2024-36972 was published on June 10, 2024. Both vulnerabilities could impact systems utilizing the af_unix protocol. 2 sources 39

Extracted Entities

CVEs (1)