CVE-2026-53054 drm/msm: Fix VM_BIND UNMAP locking
A locking error in the Linux kernel's DRM MSM driver allows race conditions during UNMAP operations, potentially leading to privilege escalation or system crashes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53054?
CVE-2026-53054 is a high-severity vulnerability in Linux kernel, published on 24 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix VM_BIND UNMAP locking
Wrong argument meant that the objs involved in UNMAP ops were not always getting locked.
Since _NO_SHARE objs share a common resv with the VM (which is always locked) this would only show up with non-_NO_SHARE BOs.
Patchwork: https://patchwork.freedesktop.org/patch/713898/
Weakness: CWE-667
Which versions are affected by CVE-2026-53054?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53054?
Apply the vendor's patch.
Is CVE-2026-53054 being exploited?
There is no known exploitation of CVE-2026-53054 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53054, DEBIAN-CVE-2026-53054, GHSA-8263-r89r-w7g7, UBUNTU-CVE-2026-53054.