CVE-2026-53197

kernel: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · June 26, 2026

Description

A flaw was found in the iptfs module of the Linux kernel. This issue, an ABBA deadlock, occurs when iptfs_destroy_state() attempts to cancel a timer while holding a spinlock that the timer's callback also tries to acquire. This circular dependency can cause the system to become unresponsive, leading to a denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-833 · Deadlock