CyberSecBulletin
CVE-2026-53071NVD status: Modified

Linux: Improper Locking

Published Updated By the CyberSecBulletin desk

CVE-2026-53071 is a high-severity improper locking vulnerability in Linux, with a CVSS 3.1 base score of 8.8 out of 10. It can be exploited from the same local network by an unauthenticated attacker, without any action from a user. The record lists versions 96dca51715d86559ed6ed8028e5445cecb80f3ae, 330b20ec97916961ee0e6c29c06bc0fa7c96e64c, 0ccd75c51f620374086f359e906917676e699a1c as the first without the flaw, so updating Linux to one of those releases or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.43% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update Linux to 96dca51715d86559ed6ed8028e5445cecb80f3ae or 330b20ec97916961ee0e6c29c06bc0fa7c96e64c or 0ccd75c51f620374086f359e906917676e699a1c or 77a853aec710b2fdf41fa298ea3cbc9a4358f917, whichever matches your release line, or a later version.
  2. Update Linux Kernel to 5.10.258 or 5.15.209 or 6.1.175 or 6.6.141, whichever matches your release line, or a later version.

Affected products and versions

VendorProductAffected versionsFixed in
LinuxLinux15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, 96dca51715d86559ed6ed8028e5445cecb80f3ae; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, 330b20ec97916961ee0e6c29c06bc0fa7c96e64c; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, 0ccd75c51f620374086f359e906917676e699a1c; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, 77a853aec710b2fdf41fa298ea3cbc9a4358f917; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, fe1188abdae9b7a8199dcdfcf9244d5e5d61eb14; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, dc89961b76f12aff47124c1df4bdb32a080f4d0c; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, 5501d055a1ce3c747141e3955ba8cf034d193f3e; 15f02b91056253e8cdc592888f431da0731337b8 up to, but not including, 42776497cdbc9a665b384a6dcb85f0d4bd927eab; and 1 more ranges96dca51715d86559ed6ed8028e5445cecb80f3ae, 330b20ec97916961ee0e6c29c06bc0fa7c96e64c, 0ccd75c51f620374086f359e906917676e699a1c, 77a853aec710b2fdf41fa298ea3cbc9a4358f917, fe1188abdae9b7a8199dcdfcf9244d5e5d61eb14, dc89961b76f12aff47124c1df4bdb32a080f4d0c
Red HatRed Hat Enterprise Linux 10Not specified in the recordNot stated
Red HatRed Hat Enterprise Linux 8Not specified in the recordNot stated
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportNot specified in the recordNot stated
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnNot specified in the recordNot stated
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportNot specified in the recordNot stated
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnNot specified in the recordNot stated
Red HatRed Hat Enterprise Linux 9Not specified in the recordNot stated
Red HatRed Hat Enterprise Linux 6Not specified in the recordNot stated
Red HatRed Hat Enterprise Linux 7Not specified in the recordNot stated
LinuxLinux Kernel5.7 up to, but not including, 5.10.258; 5.11 up to, but not including, 5.15.209; 5.16 up to, but not including, 6.1.175; 6.2 up to, but not including, 6.6.141; 6.7 up to, but not including, 6.12.91; 6.13 up to, but not including, 6.18.33; 6.19 up to, but not including, 7.0.105.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
AdjacentThe attacker must be on the same local network segment.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Scored by CNA.

Scoring systemScoreSeverityScored by
CVSS 3.18.8HighCNA
CVSS 3.17.5HighCNA

Official description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp l2cap_ecred_reconf_rsp() calls l2cap_chan_del() without holding l2cap_chan_lock(). Every other l2cap_chan_del() caller in the file acquires the lock first. A remote BLE device can send a crafted L2CAP ECRED reconfiguration response to corrupt the channel list while another thread is iterating it. Add l2cap_chan_hold() and l2cap_chan_lock() before l2cap_chan_del(), and l2cap_chan_unlock() and l2cap_chan_put() after, matching the pattern used in l2cap_ecred_conn_rsp() and l2cap_conn_del().

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

How developers prevent this class of flaw

  • Use industry standard APIs to implement locking mechanism.

More Improper Locking vulnerabilities (CWE-667)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Recent Improper Locking vulnerabilities

Spotted an error? Tell us.