CVE-2026-53096
Description
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) component, specifically within the dev_map_redirect_multi() function. This vulnerability arises from an incorrect iteration method in an RCU (Read-Copy-Update) protected context, where hlist_for_each_entry_safe() is used without proper RCU dereferencing. This can allow a reader on weakly-ordered architectures, such as ARM64 and POWER, to observe partially-constructed data nodes. The consequence is potential data inconsistency, which could lead to system instability or unexpected behavior.
Statement
This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because triggering the race condition requires specific eBPF device-mapping network configurations and primarily affects systems running on weakly-ordered CPU architectures. Concurrent modification of device hash tables during generic packet redirection is not present in typical workloads, and unprivileged eBPF access is disabled by default across Red Hat Enterprise Linux releases. Consequently, the flaw presents limited real-world exposure, resulting at most in a local denial of service via system instability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | High |
| Integrity Impact | None | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
