CVE-2026-53277: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
walks1() and kvmwalknesteds2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, kvmats12() and kvmfinds1desclevel() call into the respective walkers without taking kvm->srcu.
Fix by acquiring kvm->srcu prior to the table walk in both instances.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53277?
CVE-2026-53277 has a risk score of 34, indicating a significant vulnerability that could impact system stability and security.
How do I fix CVE-2026-53277?
To fix CVE-2026-53277, ensure you update your Linux kernel to the patched version that addresses this vulnerability.
Who is affected by CVE-2026-53277?
CVE-2026-53277 affects users running the KVM virtualization on arm64 architecture within the Linux kernel.
What are the potential impacts of CVE-2026-53277?
CVE-2026-53277 could potentially lead to memory corruption or system crashes if exploited due to improper handling of page table walks.
Is CVE-2026-53277 easily exploitable?
The exploitability of CVE-2026-53277 depends on the specific configuration and usage patterns of the KVM setup, making it critical to assess your own environment.