Medium 5.5Published Jun 24, 2026

CVE-2026-53035bpf, sockmap: Fix af_unix iter deadlock

Updated under an hour ago (Oct 28, 2026, 3:00 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix af_unix iter deadlock bpf_iter_unix_seq_show() may deadlock when lock_sock_fast() takes the fast path and the iter prog attempts to update a sockmap. Which ends up spinning at sock_map_update_elem()'s bh_lock_sock(): WARNING: possible recursive locking detected test_progs/1393 is trying to acquire lock: ffff88811ec25f58 (slock-AF_UNIX){+...}-{3:3}, at: sock_map_update_elem+0xdb/0x1f0 but task is already holding lock: ffff88811ec25f58 (slock-AF_UNIX){+...}-{3:3}, at: __lock_sock_fast+0x37/0xe0 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(slock-AF_UNIX); lock(slock-AF_UNIX); *** DEADLOCK *** May be due to missing lock nesting notation 4 locks held by test_progs/1393: #0: ffff88814b59c790 (&p->lock){+.+.}-{4:4}, at: bpf_seq_read+0x59/0x10d0 #1: ffff88811ec25fd8 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: bpf_seq_read+0x42c/0x10d0 #2: ffff88811ec25f58 (slock-AF_UNIX){+...}-{3:3}, at: __lock_sock_fast+0x37/0xe0 #3: ffffffff85a6a7c0 (rcu_read_lock){....}-{1:3}, at: bpf_iter_run_prog+0x51d/0xb00 Call Trace: dump_stack_lvl+0x5d/0x80 print_deadlock_bug.cold+0xc0/0xce __lock_acquire+0x130f/0x2590 lock_acquire+0x14e/0x2b0 _raw_spin_lock+0x30/0x40 sock_map_update_elem+0xdb/0x1f0 bpf_prog_2d0075e5d9b721cd_dump_unix+0x55/0x4f4 bpf_iter_run_prog+0x5b9/0xb00 bpf_iter_unix_seq_show+0x1f7/0x2e0 bpf_seq_read+0x42c/0x10d0 vfs_read+0x171/0xb20 ksys_read+0xff/0x200 do_syscall_64+0x6b/0x3a0 entry_SYSCALL_64_after_hwframe+0x76/0x7e

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 2c860a43dd77f969bb959336a2f743d7103a8f63 before bd3592129f24243713673a07225cf1f15a9bb835; from 2c860a43dd77f969bb959336a2f743d7103a8f63 before 3cef33b9813b78f227942572fb317afcd5c9ac94; from 2c860a43dd77f969bb959336a2f743d7103a8f63 before 87828b380956d4986f59f2c086e0b09b3e6cdaae; from 2c860a43dd77f969bb959336a2f743d7103a8f63 before 527057ebe8076dfbcaef51195ff1b7508646be2c; from 2c860a43dd77f969bb959336a2f743d7103a8f63 before 66d9fab4565eafe1afe7ba0581f79b76073b60fa; from 2c860a43dd77f969bb959336a2f743d7103a8f63 before 4d328dd695383224aa750ddee6b4ad40c0f8d205	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/bd3592129f24243713673a07225cf1f15a9bb835	patch
https://git.kernel.org/stable/c/3cef33b9813b78f227942572fb317afcd5c9ac94	patch
https://git.kernel.org/stable/c/87828b380956d4986f59f2c086e0b09b3e6cdaae	patch
https://git.kernel.org/stable/c/527057ebe8076dfbcaef51195ff1b7508646be2c	patch
https://git.kernel.org/stable/c/66d9fab4565eafe1afe7ba0581f79b76073b60fa	patch
https://git.kernel.org/stable/c/4d328dd695383224aa750ddee6b4ad40c0f8d205	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.