CVE-2026-53274

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A logic flaw in the smc setsockopt() function allows a local unprivileged user to cause a Denial of Service (DoS). The issue occurs because the function calls copy from sockptr() while holding the lock sock(sk) lock. An attacker can provide a memory page monitored by userfaultfd (a Linux feature that allows a user-space program to handle page faults) or FUSE-backed memory to halt execution during the copy operation, keeping the lock held indefinitely. When combined with asynchronous tear-down operations such as shutdown(), this exhausts the kernel workqueues (kworkers) and triggers the hung task watchdog.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.