CVE-2026-80521

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the af unix module where the garbage collector (GC) may partially free a dead Strongly Connected Component (SCC). This occurs during a race condition when unix add edges() publishes a new edge to the GC before the socket buffer (skb) is queued by skb queue tail(). If the associated sockets are closed and GC is triggered, the system may fail to free the SCC immediately. Subsequently, when unix walk scc fast() iterates over the SCC entries, it may encounter an inconsistent state. The fix involves unlinking the scc entry within the unix del edge() function before freeing the vertex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.