CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.180-1~deb11u1 - Configuration
Enable the ARM64_WORKAROUND_REPEAT_TLBI workaround on affected Arm CPUs to mitigate the TLBI errata (arm64: errata: Mitigate TLBI errata on various Arm CPUs).
Linux kernel (arm64) ARM64_WORKAROUND_REPEAT_TLBI = enable - Configuration
For any affected TLBI;DSB sequence, append an additional TLBI;DSB (the additional TLBI can use any operation broadcast to affected CPUs; the additional DSB can use any option sufficient to complete the additional TLBI) so that all memory write effects affected by the first TLBI are globally observed.
Software/firmware sequence (TLBI;DSB) additional TLBI;DSB = add after affected sequence - Compensating control
Update the silicon errata documentation accordingly for the affected CPUs (including any CPUs that share a common erratum number) so the required workaround/sequence is reflected in the documentation.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53354?
CVE-2026-53354 has a risk rating of 26, indicating a significant impact depending on the affected configurations.
What types of CPUs are affected by CVE-2026-53354?
CVE-2026-53354 affects various Arm CPUs that have specific errata related to TLBI handling.
How do I fix CVE-2026-53354?
To mitigate CVE-2026-53354, ensure you are using an updated version of the Linux kernel that includes the relevant patches for TLBI errata.
What is the main issue addressed by CVE-2026-53354?
CVE-2026-53354 addresses an issue where a broadcast TLBI;DSB sequence may complete incorrectly on affected Arm CPUs.
When was CVE-2026-53354 published?
CVE-2026-53354 was published on July 1, 2026.