CVE-2026-53096

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) component, specifically within the dev_map_redirect_multi() function. This vulnerability arises from an incorrect iteration method in an RCU (Read-Copy-Update) protected context, where hlist_for_each_entry_safe() is used without proper RCU dereferencing. This can allow a reader on weakly-ordered architectures, such as ARM64 and POWER, to observe partially-constructed data nodes. The consequence is potential data inconsistency, which could lead to system instability or unexpected behavior.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because triggering the race condition requires specific eBPF device-mapping network configurations and primarily affects systems running on weakly-ordered CPU architectures. Concurrent modification of device hash tables during generic packet redirection is not present in typical workloads, and unprivileged eBPF access is disabled by default across Red Hat Enterprise Linux releases. Consequently, the flaw presents limited real-world exposure, resulting at most in a local denial of service via system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.