CVE-2026-53361

af_unix: Set gc_in_progress to true in unix_gc().

State: Published
Severity: 7.1 High
Published: Jul 4, 2026
Updated: Oct 19, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Set gc_in_progress to true in unix_gc().

Igor Ushakov reported that unix_gc() could run with gc_in_progress being false if the work is scheduled while running:

Thread 1 Thread 2 Thread 3 -------- -------- -------- unix_schedule_gc() unix_schedule_gc() `- if (!gc_in_progress) `- if (!gc_in_progress) |- gc_in_progress = true | `- queue_work() | unix_gc() <----------------/ | | |- gc_in_progress = true ... `- queue_work() | | `- gc_in_progress = false | | unix_gc() <---------------------------------------------' | ... /* gc_in_progress == false */ | `- gc_in_progress = false

unix_peek_fpl() relies on gc_in_progress not to confuse GC by MSG_PEEK.

Let's set gc_in_progress to true in unix_gc().

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	Linux

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	ceb8bd6c69c1680fd9b45e7f16d7170c9c7513a5 to before 20aa894d475bd8086b25c1113ec4ca70f70c7a98Affected 328840c93bd6a4871dd10908d01b41eab83eb8e2 to before 82c17e13d404f686e164590483fd6c1abaa675d0Affected 8b90a9f819dc2a06baae4ec1a64d875e53b824ec to before 591f1ac217428a6d2b32a8ac14aac0fab44f155aAffected 8b90a9f819dc2a06baae4ec1a64d875e53b824ec to before 0cfa78c050662784fc8e3ab26dbfd1dc632b2082Affected 8b90a9f819dc2a06baae4ec1a64d875e53b824ec to before d82ba05263c69fa2437fe93e4e561cc40f4c03afAffected 6.1.141 to before 6.1.183Affected 6.6.93 to before 6.6.144Affected
LinuxLinux	6.9Affected before 6.9Not affected 6.1.183 through 6.1.Not affected 6.6.144 through 6.6.Not affected 6.12.95 through 6.12.Not affected 6.18.38 through 6.18.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

ceb8bd6c69c1680fd9b45e7f16d7170c9c7513a5 to before 20aa894d475bd8086b25c1113ec4ca70f70c7a98Affected
328840c93bd6a4871dd10908d01b41eab83eb8e2 to before 82c17e13d404f686e164590483fd6c1abaa675d0Affected
8b90a9f819dc2a06baae4ec1a64d875e53b824ec to before 591f1ac217428a6d2b32a8ac14aac0fab44f155aAffected
8b90a9f819dc2a06baae4ec1a64d875e53b824ec to before 0cfa78c050662784fc8e3ab26dbfd1dc632b2082Affected
8b90a9f819dc2a06baae4ec1a64d875e53b824ec to before d82ba05263c69fa2437fe93e4e561cc40f4c03afAffected
6.1.141 to before 6.1.183Affected
6.6.93 to before 6.6.144Affected

LinuxLinux

6.9Affected
before 6.9Not affected
6.1.183 through 6.1.*Not affected
6.6.144 through 6.6.*Not affected
6.12.95 through 6.12.*Not affected
6.18.38 through 6.18.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.