{
  "threat_severity" : "Important",
  "public_date" : "2026-07-04T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: af_unix: Set gc_in_progress to true in unix_gc()",
    "id" : "2497035",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2497035"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.8",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-366",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\naf_unix: Set gc_in_progress to true in unix_gc().\nIgor Ushakov reported that unix_gc() could run with gc_in_progress\nbeing false if the work is scheduled while running:\nThread 1         Thread 2                     Thread 3\n--------         --------                     --------\nunix_schedule_gc()           unix_schedule_gc()\n`- if (!gc_in_progress)      `- if (!gc_in_progress)\n|- gc_in_progress = true     |\n`- queue_work()              |\nunix_gc() <----------------/                     |\n|                                                |- gc_in_progress = true\n...                                              `- queue_work()\n|                                                       |\n`- gc_in_progress = false                               |\n|\nunix_gc() <---------------------------------------------'\n|\n... /* gc_in_progress == false */\n|\n`- gc_in_progress = false\nunix_peek_fpl() relies on gc_in_progress not to confuse GC\nby MSG_PEEK.\nLet's set gc_in_progress to true in unix_gc().", "A flaw was found in the Linux kernel's `af_unix` component. A race condition exists within the `unix_gc()` garbage collection function where the `gc_in_progress` flag may not be correctly set. This could lead to `unix_peek_fpl()` misinterpreting garbage collection status when handling `MSG_PEEK` operations, potentially causing unexpected behavior or information disclosure to a local attacker." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-09-02T00:00:00Z",
    "advisory" : "RHSA-2026:62609",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "kernel-0:6.12.0-55.102.1.el10_0"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-53361\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53361\nhttps://lore.kernel.org/linux-cve-announce/2026070436-CVE-2026-53361-f969@gregkh/T" ],
  "name" : "CVE-2026-53361",
  "csaw" : false
}