erratum_1(9)

erratum_1 💅

okay so this is from the Kernel API Manual bestie, and it's literally titled Erratum 1: TCP socket identification — yes we're reading errata for fun now, that's the energy we're bringing 🎀

✨ NAME ✨

erratum_1 — Erratum 1: TCP socket identification 🦋

🌸 DESCRIPTION 🌸

okay so picture this: there was this issue 🙈 where IPv4 and IPv6 stream sockets — you know, the ones like SMC, MPTCP, or SCTP — were getting incorrectly restricted by TCP access rights during bind(2) and connect(2) operations. like, not them being dragged into TCP's business?? 😭

This fix addresses that whole situation. It ensures that only TCP sockets are subject to TCP access rights, which lets all the other protocols operate without unnecessary restrictions. slay for them honestly 👑

🔥 Impact 🔥

so here's the part you actually need to know, no cap:

In kernels without this fix, using LANDLOCK_ACCESS_NET_BIND_TCP or LANDLOCK_ACCESS_NET_CONNECT_TCP would incorrectly restrict non-TCP stream protocols (SMC, MPTCP, SCTP), potentially breaking applications that rely on these protocols while using Landlock network restrictions. yeah. that's the whole vibe check and it did not pass 💀

👀 SEE ALSO 👀

• Kernel file ./security/landlock/errata/abi-4.h — go read it, iykyk 📖

and that's the tea, bestie 🍓 this one's from ./security/landlock/errata, dated October 2026, and it's giving very much "tiny errata page, big main character energy" ✨ mwah, go forth and Landlock responsibly 💜