Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53197

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() iptfs_destroy_state() calls hrtimer_cancel() while holding a spinlock that the timer callback also acquires, leading to an ABBA deadlock on SMP systems. For the output timer (iptfs_timer): - iptfs_destroy_state() holds x->lock, calls hrtimer_cancel() - iptfs_delay_timer() callback takes x->lock For the drop timer (drop_timer): - iptfs_destroy_state() holds drop_lo
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1df890d232a03f8bcb56eb0aab4b0b20e926141d08f6c44d189a9b5e74053662
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/xfrm/xfrm_iptfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/xfrm/xfrm_iptfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a13ca53e47e500854a3b9ec18b5dc83acfec863e","status":"affected","version":"4b3faf610cc63bfac972711635eafbca5e7d7117","versionType":"git"},{"lessThan":"822b98d354e63e8249e85473c5f3c519f3c9cecc","status":"affected","version":"4b3faf610cc63bfac972711635eafbca5e7d7117","versionType":"git"},{"lessThan":"c8a8a75b733467b00c08b91a38dbaf207a08ed6e","status":"affected","version":"4b3faf610cc63bfac9727116…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/xfrm/xfrm_iptfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/xfrm/xfrm_iptfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a13ca53e47e500854a3b9ec18b5dc83acfec863e","status":"affected","version":"4b3faf610cc63bfac972711635eafbca5e7d7117","versionType":"git"},{"lessThan":"822b98d354e63e8249e85473c5f3c519f3c9cecc","status":"affected","version":"4b3faf610cc63bfac972711635eafbca5e7d7117","versionType":"git"},{"lessThan":"c8a8a75b733467b00c08b91a38dbaf207a08ed6e","status":"affected","version":"4b3faf610cc63bfac9727116…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/affected/0

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/822b98d354e63e8249e85473c5f3c519f3c9cecc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/a13ca53e47e500854a3b9ec18b5dc83acfec863e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c8a8a75b733467b00c08b91a38dbaf207a08ed6e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6f005735c2124aab97a13c2fd440ef314c23b5f3675272de5a974b8e0e91faf3 · sha256:3eaf67d1d0d49a02… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer