CVE-2026-53084

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A lock ordering problem exists in the BPF subsystem when using the task vma iterator. Holding the per-VMA lock across the BPF program body can lead to a deadlock when helpers attempt to acquire locks that depend on mmap lock, creating the sequence vm lock -> i rwsem -> mmap lock -> vm lock. To resolve this, the VMA is snapshotted using memcpy() within the next() function under the per-VMA lock, and the lock is released before returning, ensuring the BPF program only accesses the snapshot. The verifier manages trust for vm mm and vm file pointers, where vm file is reference-counted using get file() and released via fput(), while lock vma under rcu() verifies vm mm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.