Critical Alert 6 Active Exploits Detected Today

CVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability →
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability →
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability →
CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability →
CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability →
CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability →
Powered by CVE Watchtower
×
August 27, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-53361NVD

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Set gc_in_progress to true in unix_gc().

Igor Ushakov reported that unix_gc() could run with gc_in_progress
being false if the work is scheduled while running:

Thread 1 Thread 2 Thread 3
-------- -------- --------
unix_schedule_gc() unix_schedule_gc()
`- if (!gc_in_progress) `- if (!gc_in_progress)
|- gc_in_progress = true |
`- queue_work() |
unix_gc() <----------------/ |
| |- gc_in_progress = true
... `- queue_work()
| |
`- gc_in_progress = false |
|
unix_gc() <---------------------------------------------'
|
... /* gc_in_progress == false */
|
`- gc_in_progress = false

unix_peek_fpl() relies on gc_in_progress not to confuse GC
by MSG_PEEK.

Let's set gc_in_progress to true in unix_gc().
Severity Level
HIGH(7.1)
Published Date
Jul 4, 2026
Last Modified
Aug 19, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.13%Probability
Root Weakness (CWE)
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v3.1 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityNone
IntegrityHigh
AvailabilityHigh