{
  "cveId": "CVE-2026-53259",
  "url": "https://patchblox.com/security/cve/CVE-2026-53259",
  "summary": "CVE-2026-53259 is fixed in 50 products on 1 platform, first by DEBIAN-CVE-2026-53259, released June 28, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: anycast: insert aca into global hash under...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:\nipv6: anycast: insert aca into global hash under idev-\u003Elock\nsyzbot reported a splat [1]: a slab-use-after-free in\nipv6_chk_acast_addr(), which walks the global inet6_acaddr_lst[] hash\nunder RCU and dereferences a struct ifacaddr6 that has already been\nfreed while still linked in the hash, so a later reader walks into a\ndangling node.\nIn __ipv6_dev_ac_inc() the aca is allocated with refcount 1, then\naca_get() bumps it to 2 to keep it alive across the unlocked region.\nIt is published to idev-\u003Eac_list under idev-\u003Elock, but\nipv6_add_acaddr_hash() runs after write_unlock_bh(). A concurrent\nteardown (ipv6_ac_destroy_dev() from addrconf_ifdown(), under RTNL)\ncan slip into that window:\nCPU0 __ipv6_dev_ac_inc           CPU1 ipv6_ac_destroy_dev (RTNL)\n------------------------------   ------------------------------------\naca_alloc()              refcnt 1\naca_get()               refcnt 2\nwrite_lock_bh(idev-\u003Elock)\nadd aca to ac_list\nwrite_unlock_bh(idev-\u003Elock)\nwrite_lock_bh(idev-\u003Elock)\npull aca off ac_list\nwrite_unlock_bh(idev-\u003Elock)\nipv6_del_acaddr_hash(aca)\nhlist_del_init_rcu() is a no-op,\naca is not in the hash yet\naca_put()           refcnt 2-\u003E1\nipv6_add_acaddr_hash(aca)\naca now inserted into the hash\naca_put()                refcnt 1-\u003E0\ncall_rcu(aca_free_rcu) -\u003E kfree(aca)\nThe hash removal becomes a no-op because the insertion has not\nhappened yet, so once CPU0 inserts and drops the last reference, the\naca is freed while still linked in inet6_acaddr_lst[], and readers\ndereference freed memory after the slab slot is reused.\nThis window opened once RTNL stopped serializing the join path against\ndevice teardown. Move ipv6_add_acaddr_hash() inside the idev-\u003Elock\nsection so the ac_list and hash insertions are atomic with respect to\nteardown: a racing remover now either misses the aca entirely or finds\nit in both lists.\nacaddr_hash_lock is now nested under idev-\u003Elock, which is acquired in\nsoftirq context, so switch all acaddr_hash_lock sites to spin_lock_bh()\nto avoid the irq lock inversion reported in [2].\n[1] https://syzkaller.appspot.com/bug?extid=a01df04303c131efbf3a\n[2] https://lore.kernel.org/netdev/6a194ef7.ba3b1513.1890b4.0000.GAE@google.com/",
  "published": "2026-06-25T00:00:00Z",
  "severity": "moderate",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00115,
  "epssPercentile": 0.0157,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 10",
      "fixedVersion": "6.12.0-211.52.1.el10_2",
      "fix": "RHSA-2026:64775",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-64775",
      "released": "2026-08-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "rocky 10",
      "fixedVersion": "0:6.12.0-211.52.1.el10_2",
      "fix": "RLSA-2026:64775",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-64775",
      "released": "2026-09-09T12:09:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-cross-headers",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel-matched",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-uki-virt",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel-matched",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.36-69.134",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra-matched",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uki-virt",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uki-virt-addons",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libperf",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.0.13-1",
      "fix": "DEBIAN-CVE-2026-53259",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53259",
      "released": "2026-06-28T17:47:07Z"
    },
    {
      "platform": "linux",
      "product": "microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rtla",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rv",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-211.53.1.el10_2",
      "fix": "ELSA-2026-64775-0",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-64775-0",
      "released": "2026-09-10T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}