CVE-2026-53361 Details
Description
In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). Igor Ushakov reported that unix_gc() could run with gc_in_progress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unix_schedule_gc() unix_schedule_gc() `- if (!gc_in_progress) `- if (!gc_in_progress) |- gc_in_progress = true | `- queue_work() | unix_gc() <----------------/ | | |- gc_in_progress = true ... `- queue_work() | | `- gc_in_progress = false | | unix_gc() <---------------------------------------------' | ... /* gc_in_progress == false */ | `- gc_in_progress = false unix_peek_fpl() relies on gc_in_progress not to confuse GC by MSG_PEEK. Let's set gc_in_progress to true in unix_gc().
A vulnerability in the Linux kernel's af_unix implementation can lead to improper garbage collection (GC) management. The issue arises because the GC process can be scheduled while another thread is already executing GC, causing the 'gc_in_progress' flag to be incorrectly managed. This flaw was reported by Igor Ushakov and can confuse the GC process, particularly when using the MSG_PEEK option.
The vulnerability has been addressed in the official Linux kernel repository. Users can upgrade to the latest version to mitigate this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0cfa78c050662784fc8e3ab26dbfd1dc632b2082 | kernel.org | Patch |
| https://git.kernel.org/stable/c/20aa894d475bd8086b25c1113ec4ca70f70c7a98 | kernel.org | |
| https://git.kernel.org/stable/c/591f1ac217428a6d2b32a8ac14aac0fab44f155a | kernel.org | Patch |
| https://git.kernel.org/stable/c/82c17e13d404f686e164590483fd6c1abaa675d0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d82ba05263c69fa2437fe93e4e561cc40f4c03af | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.1.141, < 6.2 >= 6.6.93, < 6.6.144 >= 6.9, < 6.12.95 >= 6.13, < 6.18.38 >= 6.19, < 7.1 7.1 rc1 7.1 rc2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 19, 2026 | CVE Modified | kernel.org |
| Jul 22, 2026 | Initial Analysis | [email protected] |
| Jul 18, 2026 | CVE Modified | kernel.org |
| Jul 4, 2026 | New CVE Received | kernel.org |