CVE-2026-53184

A flaw was found in the Linux kernel. When a User Datagram Protocol (UDP) socket is configured with a sockmap, and a BPF (Berkeley Packet Filter) program attached to it calls a socket-lookup helper, the skb->dev field is not properly cleared. This improper handling of the skb->dev field can lead to a general protection fault, resulting in a Denial of Service (DoS) condition. A local attacker with the necessary permissions to load BPF programs could potentially trigger this vulnerability.

This vulnerability is rated as Moderate impact because exploitation requires local access with elevated privileges to load and attach BPF verdict programs, preventing unprivileged remote compromise. In default Red Hat Enterprise Linux deployments, UDP sockets do not utilize sockmaps, and unprivileged users lack the administrative capabilities necessary to register socket verdict filters. Consequently, the flaw cannot be triggered without privileged access, limiting the overall impact to a local denial of service via a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.