CVE-2026-53084

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. This vulnerability involves a lock ordering problem that occurs when BPF programs acquire certain locks that depend on the mmap_lock. This issue could potentially lead to system instability or unexpected behavior due to incorrect handling of virtual memory area (VMA) locks.

This vulnerability is assessed as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with elevated privileges to load and execute tracing iterators, restricting risk to authorized environments. A privileged local user invoking a task virtual memory area iterator could trigger circular locking dependencies across memory management structures, resulting in a kernel deadlock and denial of service. The issue does not permit privilege escalation, arbitrary code execution, or unauthorized data access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.