CVE-2026-52979

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the network subsystem where the psp assoc device get locked() function obtains a psp dev reference through psp dev get for sock(), which utilizes psp dev tryget() under Read-Copy-Update (RCU), a synchronization mechanism that allows multiple readers to access data while it is being updated. The function then acquires the psd->lock and releases the reference. A race condition occurs if psp dev unregister() completes before the lock is acquired, allowing it to take the psd->lock, clear the state, and drop the registration reference. This happens because the lock does not sufficiently prevent device unregistration when upgrading a reference to a locked device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.