Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53264

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing for action lifecycle When NEWTFILTER and DELFILTER are run concurrently it is possible to create a race with an associated action. Let's illustrate with CPU0 running NEWTFILTER and CPU1 running DELFILTER: 0: mutex_lock() <-- holds the idr lock 0: rcu_read_lock() 0: p = idr_find(idr, index) <-- action p is valid (RCU protects IDR) 0: mutex_unlock() <-- releases the idr loc
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b8301dcea7b74bbb3547fd325d117f17d832c6e83b62a81fadd31d0c566525de
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/net/act_api.h","net/sched/act_api.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"98b2e40879abf0245be5a5b7af69e0f6ff524ac3","status":"affected","version":"d7fb60b9cafb982cb2e46a267646a8dfd4f2e5da","versionType":"git"},{"lessThan":"18af5d2ef0c4f65787fd1280c8b23286b9f2a835","status":"affected","version":"d7fb60b9cafb982cb2e46a267646a8dfd4f2e5da","versionType":"git"},{"lessThan":"1f1b98fea6b9ea30507d0f2fbff6750292d097e2","status":"affected","version":"d7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["include/net/act_api.h","net/sched/act_api.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionTyp…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/net/act_api.h","net/sched/act_api.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"98b2e40879abf0245be5a5b7af69e0f6ff524ac3","status":"affected","version":"d7fb60b9cafb982cb2e46a267646a8dfd4f2e5da","versionType":"git"},{"lessThan":"18af5d2ef0c4f65787fd1280c8b23286b9f2a835","status":"affected","version":"d7fb60b9cafb982cb2e46a267646a8dfd4f2e5da","versionType":"git"},{"lessThan":"1f1b98fea6b9ea30507d0f2fbff6750292d097e2","status":"affected","version":"d7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["include/net/act_api.h","net/sched/act_api.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionTyp…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-416","description":"CWE-416 Use After Free","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/adp/0/problemTypes/0/descriptions/0

Source references

9 source assertions
{"url":"https://git.kernel.org/stable/c/18af5d2ef0c4f65787fd1280c8b23286b9f2a835"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/1f1b98fea6b9ea30507d0f2fbff6750292d097e2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/5057e1aca011e51ef51498c940ef96f3d3e8a305"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/5dd51e09020c65aa53cf128e5e3517cd53b3c113"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/8b136f18ac4b2ace5aaad3305b3f8a5d8165a009"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/91d105d2cbe002f9c7b43a6183adedc37e1da1f7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/98b2e40879abf0245be5a5b7af69e0f6ff524ac3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b60e9391142e983fab2be53497aa8f71fdd09cd5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/cna/references/5
{"tags":["exploit"],"url":"https://starlabs.sg/blog/2026/07-when-ai-makes-0-days-feel-like-n-days/"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ba6e20cdc770d034c7cbec0c06ca2257af1113d9f72eae5a4a9a4e1ef635b81 · sha256:42546b88ee9cd0e9… · /containers/adp/0/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer