{"id":"DEBIAN-CVE-2024-38596","details":"In the Linux kernel, the following vulnerability has been resolved:  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg  A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writes to sk-\u003esk_shutdown using WRITE_ONCE. However, on the reader side, unix_stream_sendmsg() does not read it atomically. Consequently, this issue is causing the following KCSAN splat to occur:  \tBUG: KCSAN: data-race in unix_release_sock / unix_stream_sendmsg  \twrite (marked) to 0xffff88867256ddbb of 1 bytes by task 7270 on cpu 28: \tunix_release_sock (net/unix/af_unix.c:640) \tunix_release (net/unix/af_unix.c:1050) \tsock_close (net/socket.c:659 net/socket.c:1421) \t__fput (fs/file_table.c:422) \t__fput_sync (fs/file_table.c:508) \t__se_sys_close (fs/open.c:1559 fs/open.c:1541) \t__x64_sys_close (fs/open.c:1541) \tx64_sys_call (arch/x86/entry/syscall_64.c:33) \tdo_syscall_64 (arch/x86/entry/common.c:?) \tentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)  \tread to 0xffff88867256ddbb of 1 bytes by task 989 on cpu 14: \tunix_stream_sendmsg (net/unix/af_unix.c:2273) \t__sock_sendmsg (net/socket.c:730 net/socket.c:745) \t____sys_sendmsg (net/socket.c:2584) \t__sys_sendmmsg (net/socket.c:2638 net/socket.c:2724) \t__x64_sys_sendmmsg (net/socket.c:2753 net/socket.c:2750 net/socket.c:2750) \tx64_sys_call (arch/x86/entry/syscall_64.c:33) \tdo_syscall_64 (arch/x86/entry/common.c:?) \tentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)  \tvalue changed: 0x01 -\u003e 0x03  The line numbers are related to commit dd5a440a31fa (\"Linux 6.9-rc7\").  Commit e1d09c2c2f57 (\"af_unix: Fix data races around sk-\u003esk_shutdown.\") addressed a comparable issue in the past regarding sk-\u003esk_shutdown. However, it overlooked resolving this particular data path. This patch only offending unix_stream_sendmsg() function, since the other reads seem to be protected by unix_state_lock() as discussed in","modified":"2026-09-15T09:03:08.948486608Z","published":"2024-06-19T14:15:19.640Z","upstream":["CVE-2024-38596"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-38596"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.94-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38596.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38596.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38596.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}