CVE-2026-53277 | In the Linux kernel, the following vulnerability has been re…

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking kvm->srcu. Fix by acquiring kvm->srcu prior to the table walk in both instances.

Metadata

CVE ID: CVE-2026-53277
State: PUBLISHED
Assigner: Linux
Reserved: 2026-06-09 07:44 UTC
Published: 2026-06-25 08:40 UTC
Last updated: 2026-06-25 08:40 UTC
Vendor / Product: Linux / Linux
Sources: cve.org · NVD

Severity & Metrics

No CVSS data available.

Affected products (2)

Vendor	Product	Platform	Versions
Linux	Linux	—	be04cebf3e78874627dc1042991d5d504464a5cc < 97706097f9b851cfe55c3b00b083dfc2bcf542bc, be04cebf3e78874627dc1042991d5d504464a5cc < ec42b4ed1b072ea2d03f086061aa67bad6d8de39, be04cebf3e78874627dc1042991d5d504464a5cc < f2ca45b50d4216c9cc7ffabf50d9ad1932209251
Linux	Linux	—	6.12, 0 < 6.12, 6.18.36 ≤ 6.18., 7.0.13 ≤ 7.0. …

References (3)