CVE-2026-53083

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix RCU stall in bpf_fd_array_map_clear()

Add a missing cond_resched() in bpf_fd_array_map_clear() loop.

For PROG_ARRAY maps with many entries this loop calls

prog_array_map_poke_run() per entry which can be expensive, and

without yielding this can cause RCU stalls under load:

rcu: Stack dump where RCU GP kthread last ran:

CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)

Workqueue: events prog_array_map_clear_deferred

RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246

Call Trace:

<TASK>

prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096

__fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925

bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]

prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141

process_one_work+0x898/0x19d0 kernel/workqueue.c:3238

process_scheduled_works kernel/workqu

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References