CVE-2026-80733

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be called for sockets that are neither AF_INET nor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet socket over virtual devices such as VRF or ipvlan). In such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls through the switch statement and triggers WARN_ON_ONCE(1). Non-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP options, so loopback should default to true without generating a warning.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f
https://git.kernel.org/stable/c/97133c4d42654578fab95abe47359ebe784dde18
https://git.kernel.org/stable/c/ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe
https://git.kernel.org/stable/c/ad7fa2f411cb30f63d6725f111be134064cdb718
https://git.kernel.org/stable/c/b8a39a09ae4eaae04309e1e38ed6a1101d967496
https://git.kernel.org/stable/c/c8f256dc849205ccb2bd78bd99a3497b972b44e0
https://git.kernel.org/stable/c/d2adc4e80b29e58b5162ae09f0f657a215806c8c
https://git.kernel.org/stable/c/f625c742b33dc137c209dd13d1c5f12b1c18d71c

Configurations

No configuration.

History

No history.

Information

Published : 2026-09-03 13:06

Updated : 2026-09-03 13:06

NVD link : CVE-2026-80733

Mitre link : CVE-2026-80733

CVE.ORG link : CVE-2026-80733

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-80733", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "97133c4d42654578fab95abe47359ebe784dde18", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "f625c742b33dc137c209dd13d1c5f12b1c18d71c", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "ad7fa2f411cb30f63d6725f111be134064cdb718", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "d2adc4e80b29e58b5162ae09f0f657a215806c8c", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "c8f256dc849205ccb2bd78bd99a3497b972b44e0", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f", "versionType": "git"}, {"status": "affected", "version": "f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90", "lessThan": "b8a39a09ae4eaae04309e1e38ed6a1101d967496", "versionType": "git"}, {"status": "affected", "version": "c91f81773cd4bbebfe744e9ab30a7ce093f9b930", "versionType": "git"}, {"status": "affected", "version": "c8c30b2b17f2133e953850c547e3902c3a3d80e2", "versionType": "git"}, {"status": "affected", "version": "3fe207e4637a2e792c46a08666aa722f77d7f8f7", "versionType": "git"}, {"status": "affected", "version": "3.14.40", "lessThan": "3.15", "versionType": "semver"}, {"status": "affected", "version": "3.18.13", "lessThan": "3.19", "versionType": "semver"}, {"status": "affected", "version": "3.19.6", "lessThan": "3.20", "versionType": "semver"}], "programFiles": ["net/core/sock.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.0"}, {"status": "unaffected", "version": "0", "lessThan": "4.0", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.265", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.152", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.104", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.45", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.9", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/core/sock.c"], "defaultStatus": "affected"}]}], "published": "2026-09-03T13:06:12.050", "references": [{"url": "https://git.kernel.org/stable/c/0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/97133c4d42654578fab95abe47359ebe784dde18", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ad7fa2f411cb30f63d6725f111be134064cdb718", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b8a39a09ae4eaae04309e1e38ed6a1101d967496", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c8f256dc849205ccb2bd78bd99a3497b972b44e0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d2adc4e80b29e58b5162ae09f0f657a215806c8c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f625c742b33dc137c209dd13d1c5f12b1c18d71c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: remove WARN_ON_ONCE() from sk_mc_loop()\n\nsk_mc_loop() can be called for sockets that are neither AF_INET\nnor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet\nsocket over virtual devices such as VRF or ipvlan).\n\nIn such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls\nthrough the switch statement and triggers WARN_ON_ONCE(1).\n\nNon-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP\noptions, so loopback should default to true without generating a warning."}], "lastModified": "2026-09-03T13:06:12.050", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}