{"id":"CVE-2026-80733","state":"PUBLISHED","title":"net: remove WARN_ON_ONCE() from sk_mc_loop()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: remove WARN_ON_ONCE() from sk_mc_loop()\n\nsk_mc_loop() can be called for sockets that are neither AF_INET\nnor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet\nsocket over virtual devices such as VRF or ipvlan).\n\nIn such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls\nthrough the switch statement and triggers WARN_ON_ONCE(1).\n\nNon-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP\noptions, so loopback should default to true without generating a warning.","publishedAt":"2026-09-03T08:21:50.136Z","updatedAt":"2026-09-03T08:21:50.136Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"97133c4d42654578fab95abe47359ebe784dde18","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"f625c742b33dc137c209dd13d1c5f12b1c18d71c","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"ad7fa2f411cb30f63d6725f111be134064cdb718","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"d2adc4e80b29e58b5162ae09f0f657a215806c8c","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"c8f256dc849205ccb2bd78bd99a3497b972b44e0","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"b8a39a09ae4eaae04309e1e38ed6a1101d967496","versionType":"git"},{"version":"c91f81773cd4bbebfe744e9ab30a7ce093f9b930","status":"affected","versionType":"git"},{"version":"c8c30b2b17f2133e953850c547e3902c3a3d80e2","status":"affected","versionType":"git"},{"version":"3fe207e4637a2e792c46a08666aa722f77d7f8f7","status":"affected","versionType":"git"},{"version":"3.14.40","status":"affected","lessThan":"3.15","versionType":"semver"},{"version":"3.18.13","status":"affected","lessThan":"3.19","versionType":"semver"},{"version":"3.19.6","status":"affected","lessThan":"3.20","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/core/sock.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.0","versionType":"semver"},{"version":"5.10.265","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.152","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.104","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.45","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.9","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/core/sock.c"]}],"references":["https://git.kernel.org/stable/c/97133c4d42654578fab95abe47359ebe784dde18","https://git.kernel.org/stable/c/f625c742b33dc137c209dd13d1c5f12b1c18d71c","https://git.kernel.org/stable/c/ad7fa2f411cb30f63d6725f111be134064cdb718","https://git.kernel.org/stable/c/d2adc4e80b29e58b5162ae09f0f657a215806c8c","https://git.kernel.org/stable/c/ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe","https://git.kernel.org/stable/c/c8f256dc849205ccb2bd78bd99a3497b972b44e0","https://git.kernel.org/stable/c/0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f","https://git.kernel.org/stable/c/b8a39a09ae4eaae04309e1e38ed6a1101d967496"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/80xxx/CVE-2026-80733.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80733","state":"PUBLISHED","datePublished":"2026-09-03T08:21:50.136Z","dateUpdated":"2026-09-03T08:21:50.136Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-08-26T14:34:25.789Z"},"containers":{"cna":{"title":"net: remove WARN_ON_ONCE() from sk_mc_loop()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: remove WARN_ON_ONCE() from sk_mc_loop()\n\nsk_mc_loop() can be called for sockets that are neither AF_INET\nnor AF_INET6 (e.g. AF_PACKET sockets when sending packets via raw/packet\nsocket over virtual devices such as VRF or ipvlan).\n\nIn such cases, sk_family is not AF_INET/AF_INET6 and sk_mc_loop() falls\nthrough the switch statement and triggers WARN_ON_ONCE(1).\n\nNon-INET sockets do not support IP_MULTICAST_LOOP or IPV6_MULTICAST_LOOP\noptions, so loopback should default to true without generating a warning."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"97133c4d42654578fab95abe47359ebe784dde18","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"f625c742b33dc137c209dd13d1c5f12b1c18d71c","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"ad7fa2f411cb30f63d6725f111be134064cdb718","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"d2adc4e80b29e58b5162ae09f0f657a215806c8c","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"c8f256dc849205ccb2bd78bd99a3497b972b44e0","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f","versionType":"git"},{"version":"f60e5990d9c1424af9dbca60a23ba2a1c7c1ce90","status":"affected","lessThan":"b8a39a09ae4eaae04309e1e38ed6a1101d967496","versionType":"git"},{"version":"c91f81773cd4bbebfe744e9ab30a7ce093f9b930","status":"affected","versionType":"git"},{"version":"c8c30b2b17f2133e953850c547e3902c3a3d80e2","status":"affected","versionType":"git"},{"version":"3fe207e4637a2e792c46a08666aa722f77d7f8f7","status":"affected","versionType":"git"},{"version":"3.14.40","status":"affected","lessThan":"3.15","versionType":"semver"},{"version":"3.18.13","status":"affected","lessThan":"3.19","versionType":"semver"},{"version":"3.19.6","status":"affected","lessThan":"3.20","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/core/sock.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.0","versionType":"semver"},{"version":"5.10.265","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.216","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.183","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.152","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.104","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.45","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.9","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["net/core/sock.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/97133c4d42654578fab95abe47359ebe784dde18"},{"url":"https://git.kernel.org/stable/c/f625c742b33dc137c209dd13d1c5f12b1c18d71c"},{"url":"https://git.kernel.org/stable/c/ad7fa2f411cb30f63d6725f111be134064cdb718"},{"url":"https://git.kernel.org/stable/c/d2adc4e80b29e58b5162ae09f0f657a215806c8c"},{"url":"https://git.kernel.org/stable/c/ad7dbb1d14b1b4406eca8ef9478e8de312ba0cfe"},{"url":"https://git.kernel.org/stable/c/c8f256dc849205ccb2bd78bd99a3497b972b44e0"},{"url":"https://git.kernel.org/stable/c/0d75f2c1d0764efa756ad9c1e078d8c09ea8fc1f"},{"url":"https://git.kernel.org/stable/c/b8a39a09ae4eaae04309e1e38ed6a1101d967496"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-09-03T08:21:50.136Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.10.265"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.15.216"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.1.183"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.6.152"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.12.104"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.18.45"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"7.1.9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"7.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.14.40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.18.13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.19.6"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}