CVE-2026-53361

af_unix: Set gc_in_progress to true in unix_gc().

HIGH
7.1
CVSS Score
Published: July 4, 2026 at 11:54 AM UTC
Updated: October 19, 2026 at 08:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.1
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). Igor Ushakov reported that unix_gc() could run with gc_in_progress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unix_schedule_gc() unix_schedule_gc() `- if (!gc_in_progress) `- if (!gc_in_progress) |- gc_in_progress = true | `- queue_work() | unix_gc() <----------------/ | | |- gc_in_progress = true ... `- queue_work() | | `- gc_in_progress = false | | unix_gc() <---------------------------------------------' | ... /* gc_in_progress == false */ | `- gc_in_progress = false unix_peek_fpl() relies on gc_in_progress not to confuse GC by MSG_PEEK. Let's set gc_in_progress to true in unix_gc().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.1.141 ≤ v < 6.26.13 ≤ v < 6.18.386.19 ≤ v < 7.16.6.93 ≤ v < 6.6.1446.9 ≤ v < 6.12.95328840c93bd6a4871dd10908d01b41eab83eb8e26.1.1416.6.937.17.1 rc17.1 rc28b90a9f819dc2a06baae4ec1a64d875e53b824ecceb8bd6c69c1680fd9b45e7f16d7170c9c7513a5
Vendor states this is fixed in 0cfa78c050662784fc8e3ab26dbfd1dc632b2082 (fixed)
Vendor states this is fixed in 20aa894d475bd8086b25c1113ec4ca70f70c7a98 (fixed)
Vendor states this is fixed in 591f1ac217428a6d2b32a8ac14aac0fab44f155a (fixed)
Vendor states this is fixed in 82c17e13d404f686e164590483fd6c1abaa675d0 (fixed)
Vendor states this is fixed in d82ba05263c69fa2437fe93e4e561cc40f4c03af (fixed)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.95 (unaffected)
Vendor states this is fixed in 6.18.38 (unaffected)
Affected range stops below 6.2, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.6.144 (unaffected)
Vendor states this is fixed in 6.9 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.1HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfoCWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card