Riskcovery

CVE-2026-53314

padata: Put CPU offline callback in ONLINE section to allow failure

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Jun 26, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

padata: Put CPU offline callback in ONLINE section to allow failure

syzbot reported the following warning:

DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614

at commit 4ae12d8bd9a8 ("Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux") which tglx traced to padata_cpu_dead() given it's the only sub-CPUHP_TEARDOWN_CPU callback that returns an error.

Failure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU so move the CPU offline callback to the ONLINE section where failure is possible.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 894c9ef9780c5cf2f143415e867ee39a33ecb75d to before 65dae8b34f0810f3fa9f77c4c63650cd20820693Affected
  • 894c9ef9780c5cf2f143415e867ee39a33ecb75d to before a6d44f477000c6352de6b05e9e276e62083e5fbfAffected
  • 894c9ef9780c5cf2f143415e867ee39a33ecb75d to before 3e6c08dd97dcd22a00aee469e0adfa819071d80eAffected
  • 894c9ef9780c5cf2f143415e867ee39a33ecb75d to before 5a9f29a3e076b637d2234093e57989cf755ded5bAffected
  • 894c9ef9780c5cf2f143415e867ee39a33ecb75d to before 9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3Affected
  • 894c9ef9780c5cf2f143415e867ee39a33ecb75d to before c8c4a2972f83c8b68ff03b43cecdb898939ff851Affected
  • 2b1207801c393a5e9af2fbac2dd8b0377d8ae63aAffected
  • 0685dfa0a2ff7635c0b64f7b7f0fafbf1c3e0c14Affected
  • 3f4d3d010477365ee1aefedc3ad52563740b777eAffected
  • 4.19.202 to before 4.20Affected
  • 5.4.22 to before 5.5Affected
  • 5.5.6 to before 5.6Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.