Skip to content
Heist/ feed
High

af_unix: Set gc_in_progress to true in unix_gc().

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). Igor Ushakov reported that unix_gc() could run with gc_in_progress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unix_schedule_gc() unix_schedule_gc() `- if (!gc_in_progress) `- if (!gc_in_progress) |- gc_in_progress = true | `- queue_work() | unix_gc() <----------------/ | | |- gc_in_progress = true ... `- queue_work() | | `- gc_in_progress = false | | unix_gc() <---------------------------------------------' | ... /* gc_in_progress == false */ | `- gc_in_progress = false unix_peek_fpl() relies on gc_in_progress not to confuse GC by MSG_PEEK. Let's set gc_in_progress to true in unix_gc().

Announced Source revision 1
Original source ↗

CVE-2026-53361

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-53361

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "ceb8bd6c69c1680fd9b45e7f16d7170c9c7513a5",
        "lessThan": "20aa894d475bd8086b25c1113ec4ca70f70c7a98",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "328840c93bd6a4871dd10908d01b41eab83eb8e2",
        "lessThan": "82c17e13d404f686e164590483fd6c1abaa675d0",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "8b90a9f819dc2a06baae4ec1a64d875e53b824ec",
        "lessThan": "591f1ac217428a6d2b32a8ac14aac0fab44f155a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "8b90a9f819dc2a06baae4ec1a64d875e53b824ec",
        "lessThan": "0cfa78c050662784fc8e3ab26dbfd1dc632b2082",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "8b90a9f819dc2a06baae4ec1a64d875e53b824ec",
        "lessThan": "d82ba05263c69fa2437fe93e4e561cc40f4c03af",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6.1.141",
        "lessThan": "6.1.183",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.6.93",
        "lessThan": "6.6.144",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "net/unix/garbage.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.9"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.9",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.1.183",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.144",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.95",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.38",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.1",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/unix/garbage.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-53361

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#40812 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement