CVE-2026-53035

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) sockmap component. A deadlock can occur in the bpf_iter_unix_seq_show() function when an iterator program attempts to update a sockmap while a lock is already held. This recursive locking scenario can lead to a system freeze or unresponsiveness, resulting in a Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local environments and requires elevated privileges to attach and execute custom BPF iterator routines. An attacker with appropriate administrative capabilities (such as CAP_BPF or CAP_SYS_ADMIN) could cause a kernel self-deadlock when modifying socket maps during UNIX domain socket iteration, halting system responsiveness and producing a local denial of service. Because default configurations restrict BPF execution and do not expose this interaction to unprivileged users, the risk is contained to environments granting privileged tracing rights.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.