CVE-2026-53199: hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
hvnetvsc: use kmaplocalpage in netvsccopytosendbuf
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Configuration
Map each native page with kmap_local_page() instead of using phys_to_virt() on the entry PFN, reconstructing the physical address first and copying page by page with splits at native page boundaries.
Linux kernel hv_netvsc page mapping in netvsc_copy_to_send_buf() = kmap_local_page()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53199?
The severity of CVE-2026-53199 is rated as high with a score of 7.5.
How do I fix CVE-2026-53199?
To fix CVE-2026-53199, update to the latest version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-53199?
CVE-2026-53199 affects the Linux kernel and specifically the Microsoft azl3 kernel version 6.6.141.1-1.
What type of vulnerability is CVE-2026-53199?
CVE-2026-53199 is a memory handling vulnerability in the hv_netvsc module of the Linux kernel.
What impact does CVE-2026-53199 have on system security?
CVE-2026-53199 could allow for denial of service attacks due to improper memory handling.