Answer in brief
CVE-2026-53274 records a Medium severity (CVSS 5.5) vulnerability in net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a6a6fe27bab48f0d09a64b051e7bde432fcae081 <35a22117839602bb52283de08894c5a7dde92420 || >=a6a6fe27bab48f0d09a64b051e7bde432fcae081 <5d27d2ffe487df89ce28fda0410eafa05dbe03a0 || >=a6a6fe27bab48f0d09a64b051e7bde432fcae081 <89f6fbe0033c942cb790ffd53ca93a45eeaf1c91 || >=a6a6fe27bab48f0d09a64b051e7bde432fcae081 <dcd90f42a33e4220385f27b515183d0c91b2fc4a || >=a6a6fe27bab48f0d09a64b051e7bde432fcae081 <94d286fa5eedc550d42bcb9c85416af8f77736ff || >=a6a6fe27bab48f0d09a64b051e7bde432fcae081 <a3fdd924d88c30b9f488636ce0e4696012cf5511 | 35a22117839602bb52283de08894c5a7dde92420, 5d27d2ffe487df89ce28fda0410eafa05dbe03a0, 89f6fbe0033c942cb790ffd53ca93a45eeaf1c91, dcd90f42a33e4220385f27b515183d0c91b2fc4a, 94d286fa5eedc550d42bcb9c85416af8f77736ff, a3fdd924d88c30b9f488636ce0e4696012cf5511 |
| Linux/Linuxgeneric | 5.18 | Not reported |
Published upstream
Jun 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 25, 2026
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS A logic flaw in __smc_setsockopt() allows a local unprivileged user to cause a Denial of Service (DoS) by holding the socket lock indefinitely. The function __smc_setsockopt() calls copy_from_sockptr() while holding lock_sock(sk). By passing a userfaultfd-monitored memory page (or FUSE-backed memory on systems where unprivileged userfaultfd is disabled) as the optval, an attacker can halt execution during the copy operation, keeping the lock held. Combined with asynchronous tear-down operations like shutdown(), this exhausts the kernel wq (kworkers) and triggers the hung task watchdog. [ 240.123456] INFO: task kworker/u8:2 blocked for more than 120 seconds. [ 240.123489] Call Trace: [ 240.123501] smc_shutdown+... [ 240.123512] lock_sock_nested+... This patch moves the user-space copy outside the lock_sock() critical section to prevent the issue.
Quoted source text, attributed separately from HOL analysis.