CVE-2026-80733
net: remove WARN_ON_ONCE() from sk_mc_loop()
Description
In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc_loop() can be called for sockets that are neither AF_INET nor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet socket over virtual devices such as VRF or ipvlan). In such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls through the switch statement and triggers WARN_ON_ONCE(1). Non-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP options, so loopback should default to true without generating a warning.
INFO
Published Date :
Sept. 3, 2026, 8:21 a.m.
Last Modified :
Sept. 3, 2026, 8:21 a.m.
Remotely Exploit :
No
Source :
Linux
Solution
- Update the Linux kernel.
- Ensure non-INET sockets default loopback to true.
- Verify WARN_ON_ONCE() is removed from sk_mc_loop().
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-80733 vulnerability anywhere in the article.