{"id":"CVE-2026-53083","state":"PUBLISHED","title":"bpf: Fix RCU stall in bpf_fd_array_map_clear()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix RCU stall in bpf_fd_array_map_clear()\n\nAdd a missing cond_resched() in bpf_fd_array_map_clear() loop.\n\nFor PROG_ARRAY maps with many entries this loop calls\nprog_array_map_poke_run() per entry which can be expensive, and\nwithout yielding this can cause RCU stalls under load:\n\n  rcu: Stack dump where RCU GP kthread last ran:\n  CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)\n  Workqueue: events prog_array_map_clear_deferred\n  RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246\n  Call Trace:\n   <TASK>\n   prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096\n   __fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925\n   bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]\n   prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141\n   process_one_work+0x898/0x19d0 kernel/workqueue.c:3238\n   process_scheduled_works kernel/workqueue.c:3319 [inline]\n   worker_thread+0x770/0x10b0 kernel/workqueue.c:3400\n   kthread+0x465/0x880 kernel/kthread.c:464\n   ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153\n   ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245\n   </TASK>","publishedAt":"2026-06-24T16:30:23.568Z","updatedAt":"2026-10-30T12:26:37.618Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"419878a48085e6d5c2fcc4912eeaac2f8abf36ed","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"71ddb7defc442ab38c53123c384fedbfd8410a15","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"e1ed678855e315f90c70c1723e94157a9a82e660","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"4406942e65ca128c56c67443832988873c21d2e9","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/bpf/arraymap.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.141","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.91","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.33","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.0.10","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/bpf/arraymap.c"]}],"references":["https://git.kernel.org/stable/c/419878a48085e6d5c2fcc4912eeaac2f8abf36ed","https://git.kernel.org/stable/c/b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd","https://git.kernel.org/stable/c/71ddb7defc442ab38c53123c384fedbfd8410a15","https://git.kernel.org/stable/c/e1ed678855e315f90c70c1723e94157a9a82e660","https://git.kernel.org/stable/c/67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a","https://git.kernel.org/stable/c/4406942e65ca128c56c67443832988873c21d2e9"],"weaknesses":[],"ingestedAt":"2026-10-30T12:44:04.813Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/53xxx/CVE-2026-53083.json","commit":"db8103c5921aac81d5d90efcf3745980dafabf49","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-53083","state":"PUBLISHED","datePublished":"2026-06-24T16:30:23.568Z","dateUpdated":"2026-10-30T12:26:37.618Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-06-09T07:44:35.383Z"},"containers":{"cna":{"title":"bpf: Fix RCU stall in bpf_fd_array_map_clear()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix RCU stall in bpf_fd_array_map_clear()\n\nAdd a missing cond_resched() in bpf_fd_array_map_clear() loop.\n\nFor PROG_ARRAY maps with many entries this loop calls\nprog_array_map_poke_run() per entry which can be expensive, and\nwithout yielding this can cause RCU stalls under load:\n\n  rcu: Stack dump where RCU GP kthread last ran:\n  CPU: 0 UID: 0 PID: 30932 Comm: kworker/0:2 Not tainted 6.14.0-13195-g967e8def1100 #2 PREEMPT(undef)\n  Workqueue: events prog_array_map_clear_deferred\n  RIP: 0010:write_comp_data+0x38/0x90 kernel/kcov.c:246\n  Call Trace:\n   <TASK>\n   prog_array_map_poke_run+0x77/0x380 kernel/bpf/arraymap.c:1096\n   __fd_array_map_delete_elem+0x197/0x310 kernel/bpf/arraymap.c:925\n   bpf_fd_array_map_clear kernel/bpf/arraymap.c:1000 [inline]\n   prog_array_map_clear_deferred+0x119/0x1b0 kernel/bpf/arraymap.c:1141\n   process_one_work+0x898/0x19d0 kernel/workqueue.c:3238\n   process_scheduled_works kernel/workqueue.c:3319 [inline]\n   worker_thread+0x770/0x10b0 kernel/workqueue.c:3400\n   kthread+0x465/0x880 kernel/kthread.c:464\n   ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:153\n   ret_from_fork_asm+0x19/0x30 arch/x86/entry/entry_64.S:245\n   </TASK>"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"419878a48085e6d5c2fcc4912eeaac2f8abf36ed","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"71ddb7defc442ab38c53123c384fedbfd8410a15","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"e1ed678855e315f90c70c1723e94157a9a82e660","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a","versionType":"git"},{"version":"da765a2f599304a81a25e77908d1790414ecdbb6","status":"affected","lessThan":"4406942e65ca128c56c67443832988873c21d2e9","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/bpf/arraymap.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.141","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.91","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.33","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.0.10","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["kernel/bpf/arraymap.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/419878a48085e6d5c2fcc4912eeaac2f8abf36ed"},{"url":"https://git.kernel.org/stable/c/b1f7158a86f3cbac4d5a32beb55ca0f8027d44cd"},{"url":"https://git.kernel.org/stable/c/71ddb7defc442ab38c53123c384fedbfd8410a15"},{"url":"https://git.kernel.org/stable/c/e1ed678855e315f90c70c1723e94157a9a82e660"},{"url":"https://git.kernel.org/stable/c/67bdb4b0d26f2d6bbf1798a925ef5a3b9ed7357a"},{"url":"https://git.kernel.org/stable/c/4406942e65ca128c56c67443832988873c21d2e9"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-30T12:26:37.618Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.6.141"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.12.91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.18.33"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"7.0.10"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"7.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}