CVE-2026-53200: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Fix handling of XN[0] when !FEATXNX
XN has already been extracted from its bitfield position so using FIELDPREP() on the mask that clears XN[0] is completely broken, having the effect of unconditionally granting execute permissions...
Fix the obvious mistake by manipulating the right bit.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (KVM: arm64: nv)to a version that resolves this vulnerability.Patch KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX
Event History
Frequently Asked Questions
What level of access does an attacker need?
The vulnerability is rated as locally exploitable with low privileges required and no user interaction. The CVSS vector also indicates that exploitation can affect a scope beyond the initially vulnerable component.
Which environments are relevant?
The affected area is KVM for arm64, specifically nested-virtualization handling on systems without FEAT_XNX. Systems not using arm64 KVM nested virtualization are not identified by the provided information as relevant.
What is the security impact if exploitation succeeds?
The bug can unconditionally grant execute permissions because XN[0] is cleared incorrectly. The supplied severity data rates confidentiality, integrity, and availability impact as high.