From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 534D741D11E for ; Thu, 3 Sep 2026 08:22:39 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788423760; cv=none; b=B1SCITpp1dwAfVcLNKWmE+WOmRcRBDQemA2Q/Ouih9zm029SkOcEMW8qiYz4bAknufROPA8YjwoYlt/NALoCcwuoGpDmTJRi3xzDROmtVHKyYRIyJSPkKqjpg2cKy9UWht8FzLffY9HzpZh1mTXNNe+YXabJeE+KikJE5YhGDWA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788423760; c=relaxed/simple; bh=lK1mzovDykyVs3WZTHQ6XM9XQkQRTyqmGoijOAhUnxE=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=gmG04gKOm0w5IlKdZlecauwgbUbXPcIZB+nJ4S00bEal/UPB42yGY6NYamlDo2+vbEuwMg+0J4FVGNmjQQO43KKhwHX+hzEfRMArBSnNwEA3NiGEeWo7DT5SJoEPPkh0bH9r0LNzKTZpMwJtexaUQgn6sR+ycMnZaeunHwC8lSQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=cxhWwQJj; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="cxhWwQJj" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 7933E1F000E9; Thu, 3 Sep 2026 08:22:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1788423759; bh=TSiPhnVPrclC39WnVmo2RokwTGOImix+WgnEXdF9rD4=; h=From:To:Cc:Subject:Date:Reply-To; b=cxhWwQJjfbbtyfv79dqvpYdlg73YINv/v4bmPxPMbv+SMSxO4FBj3UzNJOpkbWwOj Ie8xiRmt48zOzdMSv2+04MTFcAJVJkiTSbSBirRJunkJuIZ8c4U7y/JyMNv3CBEiK6 NQ5uD1b0IsAGoKinxJ7weVJAvyThdG9DWOcNdQD0= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-80733: net: remove WARN_ON_ONCE() from sk_mc_loop() Date: Thu, 3 Sep 2026 10:22:02 +0200 Message-ID: <2026090358-CVE-2026-80733-06eb@gregkh> X-Mailer: git-send-email 2.55.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=3834; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=XBiD59OYKfJ/XAkht/HzViq635tcLP3i1VasX1xfz6Y=; b=owGbwMvMwCRo6H6F97bub03G02pJDFkz9dRSf5SYbymdyDnTSGrJJZEjESvtRRz9lRf9/p0uZ Ly7sC+8I5aFQZCJQVZMkeXLNp6j+ysOKXoZ2p6GmcPKBDKEgYtTACYy34VhftWTTUcWVEf6L5zA vSaUb873ZcHXQxjm6dlJHLCSSuF6fEpfbZXAgk/NWTZvAA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be called for sockets that are neither AF_INET nor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet socket over virtual devices such as VRF or ipvlan). In such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls through the switch statement and triggers WARN_ON_ONCE(1). Non-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP options, so loopback should default to true without generating a warning. The Linux kernel CVE team has assigned CVE-2026-80733 to this issue. Affected and fixed versions =========================== Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 5.10.265 with commit 97133c4d42654578fab95abe47359ebe784dde18 Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 5.15.216 with commit f625c742b33dc137c209dd13d1c5f12b1c18d71c Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 6.1.183 with commit ad7fa2f411cb30f63d6725f111be134064cdb718 Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 6.6.152 with commit d2adc4e80b29e58b5162ae09f0f657a215806c8c Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 6.12.104 with commit ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 6.18.45 with commit c8f256dc849205ccb2bd78bd99a3497b972b44e0 Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 7.1.9 with commit 0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f Issue introduced in 4.0 with commit f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90 and fixed in 7.2 with commit b8a39a09ae4eaae04309e1e38ed6a1101d967496 Issue introduced in 3.14.40 with commit c91f81773cd4bbebfe744e9ab30a7ce093f9b930 Issue introduced in 3.18.13 with commit c8c30b2b17f2133e953850c547e3902c3a3d80e2 Issue introduced in 3.19.6 with commit 3fe207e4637a2e792c46a08666aa722f77d7f8f7 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-80733 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/core/sock.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/97133c4d42654578fab95abe47359ebe784dde18 https://git.kernel.org/stable/c/f625c742b33dc137c209dd13d1c5f12b1c18d71c https://git.kernel.org/stable/c/ad7fa2f411cb30f63d6725f111be134064cdb718 https://git.kernel.org/stable/c/d2adc4e80b29e58b5162ae09f0f657a215806c8c https://git.kernel.org/stable/c/ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe https://git.kernel.org/stable/c/c8f256dc849205ccb2bd78bd99a3497b972b44e0 https://git.kernel.org/stable/c/0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f https://git.kernel.org/stable/c/b8a39a09ae4eaae04309e1e38ed6a1101d967496