Linux Kernel Memory Management Issue Affecting Unix Socket Communication
CVE-2026-53361
Key Information:
Badges
What is CVE-2026-53361?
A vulnerability in the Linux kernel relates to improper handling of the garbage collection status during socket communications. Specifically, the unix_gc() function may execute without properly setting gc_in_progress to true, potentially leading to erroneous behavior in the garbage collection process when multiple threads interact. This issue manifests when queued work might trigger race conditions where gc_in_progress does not correctly reflect the state of the garbage collection process, impacting the reliability of socket communication and garbage collection routines.
Affected Version(s)
Linux 328840c93bd6a4871dd10908d01b41eab83eb8e2 < 82c17e13d404f686e164590483fd6c1abaa675d0
Linux 8b90a9f819dc2a06baae4ec1a64d875e53b824ec < 591f1ac217428a6d2b32a8ac14aac0fab44f155a
Linux 8b90a9f819dc2a06baae4ec1a64d875e53b824ec < 0cfa78c050662784fc8e3ab26dbfd1dc632b2082
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.