High 8.8Published Jun 25, 2026

CVE-2026-53277KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

Updated under an hour ago (Oct 26, 2026, 9:00 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking kvm->srcu. Fix by acquiring kvm->srcu prior to the table walk in both instances.

CVSS: 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-820
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from be04cebf3e78874627dc1042991d5d504464a5cc before 0648b375aa951cc15d9e90f9ac4de71e0b51fa45; from be04cebf3e78874627dc1042991d5d504464a5cc before 97706097f9b851cfe55c3b00b083dfc2bcf542bc; from be04cebf3e78874627dc1042991d5d504464a5cc before ec42b4ed1b072ea2d03f086061aa67bad6d8de39; from be04cebf3e78874627dc1042991d5d504464a5cc before f2ca45b50d4216c9cc7ffabf50d9ad1932209251	CNA record
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux	from 0:6.12.0-211.52.1.el10_2 not affected	CISA ADP
linux linux_kernel linux:linux_kernel	from 6.12 before 6.18.36; from 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/0648b375aa951cc15d9e90f9ac4de71e0b51fa45
https://git.kernel.org/stable/c/97706097f9b851cfe55c3b00b083dfc2bcf542bc	patch
https://git.kernel.org/stable/c/ec42b4ed1b072ea2d03f086061aa67bad6d8de39	patch
https://git.kernel.org/stable/c/f2ca45b50d4216c9cc7ffabf50d9ad1932209251	patch
https://access.redhat.com/errata/RHSA-2026:64775
https://access.redhat.com/security/cve/CVE-2026-53277	third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492725	issue-tracking, third-party-advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53277.json	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.