Skip to main content
VulnerabilityPublished Updated

CVE-2026-53083: Linux kernel · bpf: Fix RCU stall in bpf_fd_array_map_clear()

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in e1ed678855e315f90c70c1723e94157a9a82e660 : update Linux kernel when convenient.

Data as of 30 Oct 2026, 12:49 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in e1ed678855e315f90c70c1723e94157a9a82e660, b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd, 4406942e65ca128c56c67443832988873c21d2e9 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Jun 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ da765a2f599304a81a25e77908d1790414ecdbb6, < e1ed678855e315f90c70c1723e94157a9a82e660
Fixed in
  • e1ed678855e315f90c70c1723e94157a9a82e660
LinuxLinuxAffected
  • ≥ da765a2f599304a81a25e77908d1790414ecdbb6, < b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd
Fixed in
  • b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd
LinuxLinuxAffected
  • ≥ da765a2f599304a81a25e77908d1790414ecdbb6, < 4406942e65ca128c56c67443832988873c21d2e9
Fixed in
  • 4406942e65ca128c56c67443832988873c21d2e9
LinuxLinuxAffected
  • ≥ da765a2f599304a81a25e77908d1790414ecdbb6, < 419878a48085e6d5c2fcc4912eeaac2f8abf36ed
Fixed in
  • 419878a48085e6d5c2fcc4912eeaac2f8abf36ed
LinuxLinuxAffected
  • ≥ da765a2f599304a81a25e77908d1790414ecdbb6, < 71ddb7defc442ab38c53123c384fedbfd8410a15
Fixed in
  • 71ddb7defc442ab38c53123c384fedbfd8410a15
LinuxLinuxAffected
  • ≥ da765a2f599304a81a25e77908d1790414ecdbb6, < 67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a
Fixed in
  • 67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A fix is available in the Linux kernel as indicated by the fixed commit versions. Users should update to a fixed kernel version that includes the patch adding cond_resched() in bpf_fd_array_map_clear().

Description

A vulnerability in the Linux kernel's BPF subsystem was fixed by adding a missing cond_resched() call in the bpf_fd_array_map_clear() function. Without this yield point, loops clearing PROG_ARRAY maps with many entries could cause RCU stalls under load, impacting kernel responsiveness.

References

Community reviews

Loading reviews…