CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path

Q: Which systems are most exposed to this issue?

Systems using the Linux kernel BPF DEVMAP_HASH redirect path are exposed. The issue is specifically relevant on weakly ordered architectures such as ARM64 and POWER, where a reader may observe a partially constructed hash-list node during concurrent updates or deletions.

Q: What conditions are needed to trigger the vulnerability?

The affected path runs when generic XDP redirects use a DEVMAP_HASH map, while another execution context concurrently updates or deletes entries in that map. Exploitation requires local access with low privileges according to the supplied vector.

Q: What is the likely impact?

The vulnerability is associated with a race condition and null-pointer dereference in kernel code. Its supplied severity vector indicates high availability impact, with no stated confidentiality or integrity impact.

Q: How can I determine whether a system is affected?

Check whether the running kernel includes the RCU-safe iteration fix for dev_map_redirect_multi() and the related corrected lockdep condition. Systems that use BPF generic XDP redirection with DEVMAP_HASH maps on ARM64 or POWER should be prioritized for verification.

Published Jun 24, 2026

Updated

bpf: Use RCU-safe iteration in devmapredirectmulti() SKB path

Affected Software

8 affected componentsFixes available

Linux Linux kernel

Microsoft azl3 kernel 6.6.139.1-1<6.6.143.1-1

6.6.143.1-1

Linux Linux kernel>=5.14<5.15.209

Linux Linux kernel>=5.16<6.1.175

Linux Linux kernel>=6.2<6.6.141

Linux Linux kernel>=6.7<6.12.91

Linux Linux kernel>=6.13<6.18.33

Linux Linux kernel>=6.19<7.0.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1

Event History

Jun 24, 2026

CVE Published

via MITRE·04:30 PM

Data Sourced

via MITRE·04:30 PM

DescriptionSeverity

Data Sourced

via NVD·05:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jun 27, 2026

Data Sourced

via Microsoft·08:13 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which systems are most exposed to this issue?

Systems using the Linux kernel BPF DEVMAP_HASH redirect path are exposed. The issue is specifically relevant on weakly ordered architectures such as ARM64 and POWER, where a reader may observe a partially constructed hash-list node during concurrent updates or deletions.

What conditions are needed to trigger the vulnerability?

The affected path runs when generic XDP redirects use a DEVMAP_HASH map, while another execution context concurrently updates or deletes entries in that map. Exploitation requires local access with low privileges according to the supplied vector.

What is the likely impact?

The vulnerability is associated with a race condition and null-pointer dereference in kernel code. Its supplied severity vector indicates high availability impact, with no stated confidentiality or integrity impact.

How can I determine whether a system is affected?

Check whether the running kernel includes the RCU-safe iteration fix for dev_map_redirect_multi() and the related corrected lockdep condition. Systems that use BPF generic XDP redirection with DEVMAP_HASH maps on ARM64 or POWER should be prioritized for verification.

CVE-2026-53096: bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are most exposed to this issue?

What conditions are needed to trigger the vulnerability?

What is the likely impact?

How can I determine whether a system is affected?

Company

Resources

Contact

Frequently Asked Questions

Which systems are most exposed to this issue?

What conditions are needed to trigger the vulnerability?

What is the likely impact?

How can I determine whether a system is affected?