Linux Kernel Unix Domain Socket Data-Race Vulnerability

A data-race vulnerability has been identified in the Linux kernel's handling of Unix domain sockets. The issue arises in the 'unix_dgram_peer_wake_me()' function, which is called by 'unix_dgram_poll()' without holding the necessary lock on the 'other' socket. This can lead to a race condition when checking if the receive queue is full. To avoid this, 'unix_recvq_full_lockless()' should be used instead of 'unix_recvq_full()', as the latter can trigger a data-race warning from the Kernel Concurrency Sanitizer (KCSAN).

Impact

Exploitation of this vulnerability can lead to a data-race condition, potentially causing undefined behavior in the kernel.