{"id":"CVE-2026-53361","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-53361","summary":"af_unix: Set gc_in_progress to true in unix_gc().","details":"In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Set gc_in_progress to true in unix_gc().\n\nIgor Ushakov reported that unix_gc() could run with gc_in_progress\nbeing false if the work is scheduled while running:\n\n  Thread 1         Thread 2                     Thread 3\n  --------         --------                     --------\n                   unix_schedule_gc()           unix_schedule_gc()\n                   `- if (!gc_in_progress)      `- if (!gc_in_progress)\n                      |- gc_in_progress = true     |\n                      `- queue_work()              |\n  unix_gc() <----------------/                     |\n  |                                                |- gc_in_progress = true\n  ...                                              `- queue_work()\n  |                                                       |\n  `- gc_in_progress = false                               |\n                                                          |\n  unix_gc() <---------------------------------------------'\n  |\n  ... /* gc_in_progress == false */\n  |\n  `- gc_in_progress = false\n\nunix_peek_fpl() relies on gc_in_progress not to confuse GC\nby MSG_PEEK.\n\nLet's set gc_in_progress to true in unix_gc().","published":"2026-07-04T11:54:52.543Z","modified":"2026-09-17T12:26:42.402825588Z","cvss":{"score":7.1,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"6.1.183"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0cfa78c050662784fc8e3ab26dbfd1dc632b2082"},{"type":"WEB","url":"https://git.kernel.org/stable/c/20aa894d475bd8086b25c1113ec4ca70f70c7a98"},{"type":"WEB","url":"https://git.kernel.org/stable/c/591f1ac217428a6d2b32a8ac14aac0fab44f155a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/82c17e13d404f686e164590483fd6c1abaa675d0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d82ba05263c69fa2437fe93e4e561cc40f4c03af"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53361.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53361"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-17T12:26:42.402825588Z"}}