CVE-2026-53034

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference exists in the Linux kernel's BPF sockmap implementation. The issue occurs because unix stream connect() updates the sk state variable to TCP ESTABLISHED before assigning a peer to the socket. This creates a race condition where sock map sk state allowed() incorrectly assumes the socket is fully initialized, allowing unix stream bpf update proto() to be called while the peer is still NULL, leading to a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.