CVE-2026-53005

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc7

Description An issue exists in the af unix component where SOCKMAP can hide inflight file descriptors from the AF UNIX Garbage Collector (GC). When a socket in SOCKMAP receives a socket buffer (skb) with an inflight file descriptor, the sk psock verdict data ready() function enqueues the skb to the psock->ingress skb. Because the GC cannot inspect this queue, it leads to the leaking of inflight sockets.

Additionally, SOCKMAP redirection violates the assumptions of the Tarjan-based GC regarding the status of unix edge.successor, which can result in a use-after-free condition in the unix del edges() function. Furthermore, SOCKMAP fails to call scm stat del() correctly, causing unix show fdinfo() to report inaccurate file descriptor counts.

Recommendations Update the Linux kernel to version 7.0.0-rc7 or later. As a temporary mitigation, restrict the use of SOCKMAP for sockets handling SCM attributes.