7.1

CVE-2026-53361

af_unix: Set gc_in_progress to true in unix_gc().

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Set gc_in_progress to true in unix_gc().

Igor Ushakov reported that unix_gc() could run with gc_in_progress
being false if the work is scheduled while running:

  Thread 1         Thread 2                     Thread 3
  --------         --------                     --------
                   unix_schedule_gc()           unix_schedule_gc()
                   `- if (!gc_in_progress)      `- if (!gc_in_progress)
                      |- gc_in_progress = true     |
                      `- queue_work()              |
  unix_gc() <----------------/                     |
  |                                                |- gc_in_progress = true
  ...                                              `- queue_work()
  |                                                       |
  `- gc_in_progress = false                               |
                                                          |
  unix_gc() <---------------------------------------------'
  |
  ... /* gc_in_progress == false */
  |
  `- gc_in_progress = false

unix_peek_fpl() relies on gc_in_progress not to confuse GC
by MSG_PEEK.

Let's set gc_in_progress to true in unix_gc().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 6.1.141 < 6.2
LinuxLinux Kernel Version >= 6.6.93 < 6.6.144
LinuxLinux Kernel Version >= 6.9 < 6.12.95
LinuxLinux Kernel Version >= 6.13 < 6.18.38
LinuxLinux Kernel Version >= 6.19 < 7.1
LinuxLinux Kernel Version7.1 Updaterc1
LinuxLinux Kernel Version7.1 Updaterc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.031
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0cfa78c050662784fc8e3ab26dbfd1dc632b2082
Patch
https://git.kernel.org/stable/c/591f1ac217428a6d2b32a8ac14aac0fab44f155a
Patch
https://git.kernel.org/stable/c/82c17e13d404f686e164590483fd6c1abaa675d0
Patch
https://git.kernel.org/stable/c/d82ba05263c69fa2437fe93e4e561cc40f4c03af
Patch
https://git.kernel.org/stable/c/20aa894d475bd8086b25c1113ec4ca70f70c7a98