CVE-2026-53085

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw exists in the Berkeley Packet Filter (BPF) subsystem. The task vma iterator reads task->mm locklessly and acquires mmap read trylock() without calling mmget(). If a task exits concurrently, the mm struct can be freed while still in use, potentially leading to system instability or a denial of service (DoS). Furthermore, improper handling of interrupt-disabled contexts, such as Non-Maskable Interrupts (NMI), could result in a deadlock because operations in next() and destroy() take spinlocks with IRQs disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.