Riskcovery

CVE-2026-53277

KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

State
Published
Severity
8.8 High
Published
Jun 25, 2026
Updated
Oct 21, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking kvm->srcu.

Fix by acquiring kvm->srcu prior to the table walk in both instances.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HLinux
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat-SADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • be04cebf3e78874627dc1042991d5d504464a5cc to before 0648b375aa951cc15d9e90f9ac4de71e0b51fa45Affected
  • be04cebf3e78874627dc1042991d5d504464a5cc to before 97706097f9b851cfe55c3b00b083dfc2bcf542bcAffected
  • be04cebf3e78874627dc1042991d5d504464a5cc to before ec42b4ed1b072ea2d03f086061aa67bad6d8de39Affected
  • be04cebf3e78874627dc1042991d5d504464a5cc to before f2ca45b50d4216c9cc7ffabf50d9ad1932209251Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.