{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf, sockmap: Take state lock for af_unix iter\\n\\nWhen a BPF iterator program updates a sockmap, there is a race condition in\\nunix_stream_bpf_update_proto() where the `peer` pointer can become stale[1]\\nduring a state transition TCP_ESTABLISHED -\\u003e TCP_CLOSE.\\n\\n CPU0 bpf CPU1 close\\n ——– ———-\\n\/\/ unix_stream_bpf_update_proto()\\nsk_pair = unix_peer(sk)\\nif (unlikely(!sk_pair))\\n return -EINVAL;\\n \/\/ unix_release_sock()\\n skpair = unix_peer(sk);\\n unix_peer(sk) = NULL;\\n sock_put(skpair)\\nsock_hold(sk_pair) \/\/ UaF\\n\\nMore practically, this fix guarantees that the iterator program is\\nconsistently provided with a unix socket that remains stable during\\niterator execution.\\n\\n[1]:\\nBUG: KASAN: slab-use-after-free in unix_stream_bpf_update_proto+0x155\/0x490\\nWrite of size 4 at addr ffff8881178c9a00 by task test_progs\/2231\\nCall Trace:\\n dump_stack_lvl+0x5d\/0x80\\n print_report+0x170\/0x4f3\\n kasan_report+0xe4\/0x1c0\\n kasan_check_range+0x125\/0x200\\n unix_stream_bpf_update_proto+0x155\/0x490\\n sock_map_link+0x71c\/0xec0\\n sock_map_update_common+0xbc\/0x600\\n sock_map_update_elem+0x19a\/0x1f0\\n bpf_prog_bbbf56096cdd4f01_selective_dump_unix+0x20c\/0x217\\n bpf_iter_run_prog+0x21e\/0xae0\\n bpf_iter_unix_seq_show+0x1e0\/0x2a0\\n bpf_seq_read+0x42c\/0x10d0\\n vfs_read+0x171\/0xb20\\n ksys_read+0xff\/0x200\\n do_syscall_64+0xf7\/0x5e0\\n entry_SYSCALL_64_after_hwframe+0x76\/0x7e\\n\\nAllocated by task 2236:\\n kasan_save_stack+0x30\/0x50\\n kasan_save_track+0x14\/0x30\\n __kasan_slab_alloc+0x63\/0x80\\n kmem_cache_alloc_noprof+0x1d5\/0x680\\n sk_prot_alloc+0x59\/0x210\\n sk_alloc+0x34\/0x470\\n unix_create1+0x86\/0x8a0\\n unix_stream_connect+0x318\/0x15b0\\n __sys_connect+0xfd\/0x130\\n __x64_sys_connect+0x72\/0xd0\\n do_syscall_64+0xf7\/0x5e0\\n entry_SYSCALL_64_after_hwframe+0x76\/0x7e\\n\\nFreed by task 2236:\\n kasan_save_stack+0x30\/0x50\\n kasan_save_track+0x14\/0x30\\n kasan_save_free_info+0x3b\/0x70\\n __kasan_slab_free+0x47\/0x70\\n kmem_cache_free+0x11c\/0x590\\n __sk_destruct+0x432\/0x6e0\\n unix_release_sock+0x9b3\/0xf60\\n unix_release+0x8a\/0xf0\\n __sock_release+0xb0\/0x270\\n sock_close+0x18\/0x20\\n __fput+0x36e\/0xac0\\n fput_close_sync+0xe5\/0x1a0\\n __x64_sys_close+0x7d\/0xd0\\n do_syscall_64+0xf7\/0x5e0\\n entry_SYSCALL_64_after_hwframe+0x76\/0x7e”,”published”:”2026-06-24T16:29:40.794Z”,”modified”:”2026-06-28T06:38:18.830Z”,”type”:”cve”,”title”:”bpf, sockmap: Take state lock for af_unix iter”,”source”:”Linux”,”references”:”https:\/\/git.kernel.org\/stable\/c\/c6f4015eac2e3cbc3cb7a17539e10bbb5c2049c3\\nhttps:\/\/git.kernel.org\/stable\/c\/d0d124dbcef9318e326956137b31671407094bd4\\nhttps:\/\/git.kernel.org\/stable\/c\/1a59cc6b65fd3ad9915aae5970d859109d4ce9fb\\nhttps:\/\/git.kernel.org\/stable\/c\/921920c34cb591947dd30c692500795a69f1e3fa\\nhttps:\/\/git.kernel.org\/stable\/c\/98f744d204e5d6fca589cd2c44c3190a0c71697f\\nhttps:\/\/git.kernel.org\/stable\/c\/64c2f93fc3254d3bf5de4445fb732ee5c451edb6″,”id”:”CVE-2026-53033″,”bulletinFamily”:””,”cwe”:null,”cvelist”:null,”sourceData”:”Linux Linux 2c860a43dd77f969bb959336a2f743d7103a8f63\\nLinux Linux 2c860a43dd77f969bb959336a2f743d7103a8f63\\nLinux Linux 2c860a43dd77f969bb959336a2f743d7103a8f63\\nLinux Linux 2c860a43dd77f969bb959336a2f743d7103a8f63\\nLinux Linux 2c860a43dd77f969bb959336a2f743d7103a8f63\\nLinux Linux 2c860a43dd77f969bb959336a2f743d7103a8f63\\nLinux Linux 5.15″,”sourceHref”:””,”cvss”:{“score”:7.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Linux”,”version”:”2c860a43dd77f969bb959336a2f743d7103a8f63″,”vendor”:”Linux”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf, sockmap: Take state lock for af_unix iter\\n\\nWhen a BPF iterator program updates a sockmap, there…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,28,12,15,13,7,11,5],"class_list":["post-66586","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-78","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n