CVE-2026-53083 (GCVE-0-2026-53083)
Vulnerability from cvelistv5 – Published: 2026-06-24 16:30 – Updated: 2026-06-24 16:30
VLAI
EPSS
VEX
Title
bpf: Fix RCU stall in bpf_fd_array_map_clear()
Summary
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix RCU stall in bpf_fd_array_map_clear()
Add a missing cond_resched() in bpf_fd_array_map_clear() loop.
For PROG_ARRAY maps with many entries this loop calls
prog_array_map_poke_run() per entry which can be expensive, and
without yielding this can cause RCU stalls under load:
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)
Workqueue: events prog_array_map_clear_deferred
RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246
Call Trace:
<TASK>
prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096
__fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925
bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]
prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141
process_one_work+0x898/0x19d0 kernel/workqueue.c:3238
process_scheduled_works kernel/workqueue.c:3319 [inline]
worker_thread+0x770/0x10b0 kernel/workqueue.c:3400
kthread+0x465/0x880 kernel/kthread.c:464
ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245
</TASK>
Severity
5.5 (Medium)
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
da765a2f599304a81a25e77908d1790414ecdbb6 , < b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd
(git)
Affected: da765a2f599304a81a25e77908d1790414ecdbb6 , < 71ddb7defc442ab38c53123c384fedbfd8410a15 (git) Affected: da765a2f599304a81a25e77908d1790414ecdbb6 , < e1ed678855e315f90c70c1723e94157a9a82e660 (git) Affected: da765a2f599304a81a25e77908d1790414ecdbb6 , < 67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a (git) Affected: da765a2f599304a81a25e77908d1790414ecdbb6 , < 4406942e65ca128c56c67443832988873c21d2e9 (git) |
guessed | |
| Linux | Linux |
Affected:
5.5
Unaffected: 0 , < 5.5 (semver) Unaffected: 6.6.141 , ≤ 6.6.* (semver) Unaffected: 6.12.91 , ≤ 6.12.* (semver) Unaffected: 6.18.33 , ≤ 6.18.* (semver) Unaffected: 7.0.10 , ≤ 7.0.* (semver) Unaffected: 7.1 , ≤ * (original_commit_for_fix) |
guessed |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"kernel/bpf/arraymap.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd",
"status": "affected",
"version": "da765a2f599304a81a25e77908d1790414ecdbb6",
"versionType": "git"
},
{
"lessThan": "71ddb7defc442ab38c53123c384fedbfd8410a15",
"status": "affected",
"version": "da765a2f599304a81a25e77908d1790414ecdbb6",
"versionType": "git"
},
{
"lessThan": "e1ed678855e315f90c70c1723e94157a9a82e660",
"status": "affected",
"version": "da765a2f599304a81a25e77908d1790414ecdbb6",
"versionType": "git"
},
{
"lessThan": "67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a",
"status": "affected",
"version": "da765a2f599304a81a25e77908d1790414ecdbb6",
"versionType": "git"
},
{
"lessThan": "4406942e65ca128c56c67443832988873c21d2e9",
"status": "affected",
"version": "da765a2f599304a81a25e77908d1790414ecdbb6",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"kernel/bpf/arraymap.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.5"
},
{
"lessThan": "5.5",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.141",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.91",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.33",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.*",
"status": "unaffected",
"version": "7.0.10",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.141",
"versionStartIncluding": "5.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.91",
"versionStartIncluding": "5.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.33",
"versionStartIncluding": "5.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0.10",
"versionStartIncluding": "5.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.1",
"versionStartIncluding": "5.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix RCU stall in bpf_fd_array_map_clear()\n\nAdd a missing cond_resched() in bpf_fd_array_map_clear() loop.\n\nFor PROG_ARRAY maps with many entries this loop calls\nprog_array_map_poke_run() per entry which can be expensive, and\nwithout yielding this can cause RCU stalls under load:\n\n rcu: Stack dump where RCU GP kthread last ran:\n CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)\n Workqueue: events prog_array_map_clear_deferred\n RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246\n Call Trace:\n \u003cTASK\u003e\n prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096\n __fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925\n bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]\n prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141\n process_one_work+0x898/0x19d0 kernel/workqueue.c:3238\n process_scheduled_works kernel/workqueue.c:3319 [inline]\n worker_thread+0x770/0x10b0 kernel/workqueue.c:3400\n kthread+0x465/0x880 kernel/kthread.c:464\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153\n ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245\n \u003c/TASK\u003e"
}
],
"providerMetadata": {
"dateUpdated": "2026-06-24T16:30:23.568Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd"
},
{
"url": "https://git.kernel.org/stable/c/71ddb7defc442ab38c53123c384fedbfd8410a15"
},
{
"url": "https://git.kernel.org/stable/c/e1ed678855e315f90c70c1723e94157a9a82e660"
},
{
"url": "https://git.kernel.org/stable/c/67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a"
},
{
"url": "https://git.kernel.org/stable/c/4406942e65ca128c56c67443832988873c21d2e9"
}
],
"title": "bpf: Fix RCU stall in bpf_fd_array_map_clear()",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-53083",
"datePublished": "2026-06-24T16:30:23.568Z",
"dateReserved": "2026-06-09T07:44:35.383Z",
"dateUpdated": "2026-06-24T16:30:23.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-53083",
"date": "2026-09-15",
"epss": "0.00114",
"percentile": "0.01647"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-53083\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-24T17:17:22.470\",\"lastModified\":\"2026-07-23T18:37:35.393\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbpf: Fix RCU stall in bpf_fd_array_map_clear()\\n\\nAdd a missing cond_resched() in bpf_fd_array_map_clear() loop.\\n\\nFor PROG_ARRAY maps with many entries this loop calls\\nprog_array_map_poke_run() per entry which can be expensive, and\\nwithout yielding this can cause RCU stalls under load:\\n\\n rcu: Stack dump where RCU GP kthread last ran:\\n CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)\\n Workqueue: events prog_array_map_clear_deferred\\n RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246\\n Call Trace:\\n \u003cTASK\u003e\\n prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096\\n __fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925\\n bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]\\n prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141\\n process_one_work+0x898/0x19d0 kernel/workqueue.c:3238\\n process_scheduled_works kernel/workqueue.c:3319 [inline]\\n worker_thread+0x770/0x10b0 kernel/workqueue.c:3400\\n kthread+0x465/0x880 kernel/kthread.c:464\\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153\\n ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245\\n \u003c/TASK\u003e\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"kernel/bpf/arraymap.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"da765a2f599304a81a25e77908d1790414ecdbb6\",\"lessThan\":\"b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"da765a2f599304a81a25e77908d1790414ecdbb6\",\"lessThan\":\"71ddb7defc442ab38c53123c384fedbfd8410a15\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"da765a2f599304a81a25e77908d1790414ecdbb6\",\"lessThan\":\"e1ed678855e315f90c70c1723e94157a9a82e660\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"da765a2f599304a81a25e77908d1790414ecdbb6\",\"lessThan\":\"67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"da765a2f599304a81a25e77908d1790414ecdbb6\",\"lessThan\":\"4406942e65ca128c56c67443832988873c21d2e9\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"kernel/bpf/arraymap.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.141\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.91\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.33\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.10\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"6.6.141\",\"matchCriteriaId\":\"8123B696-3885-4EBA-8C6F-C0DD37A44D96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.91\",\"matchCriteriaId\":\"C918746B-DE6F-448F-A93E-A04C5481688D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.33\",\"matchCriteriaId\":\"96D99E49-380D-43AB-BDBA-25C3AD018A9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.10\",\"matchCriteriaId\":\"A13475D2-59BF-4716-94B5-7C1D239A2CF4\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/4406942e65ca128c56c67443832988873c21d2e9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/71ddb7defc442ab38c53123c384fedbfd8410a15\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e1ed678855e315f90c70c1723e94157a9a82e660\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Low",
"current_release_date": "2026-07-23T18:41:11+00:00",
"cve": "CVE-2026-53083",
"id": "CVE-2026-53083",
"initial_release_date": "2026-06-24T00:00:00+00:00",
"product_status:known_affected": "232",
"product_status:known_not_affected": "42",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: bpf: Fix RCU stall in bpf_fd_array_map_clear()",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53083.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-09-10T16:58:40Z",
"cve": "CVE-2026-53083",
"id": "CVE-2026-53083",
"initial_release_date": "2026-07-03T03:05:25Z",
"product_status:first_fixed": "2",
"product_status:known_affected": "557",
"product_status:known_not_affected": "175",
"product_status:recommended": "250",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-53083",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-53083.json",
"version": "11"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…