CVE-2026-53277 KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
A race condition in Linux KVM arm64 page table walks allows attackers to cause denial of service or potentially escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53277?
CVE-2026-53277 is a high-severity vulnerability in Linux kernel, published on 25 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking kvm->srcu.
Fix by acquiring kvm->srcu prior to the table walk in both instances.
Which versions are affected by CVE-2026-53277?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53277?
Apply the vendor's patch.
Is CVE-2026-53277 being exploited?
There is no known exploitation of CVE-2026-53277 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53277, DEBIAN-CVE-2026-53277, GHSA-fgxj-vfg7-cpqq, ROOT-OS-DEBIAN-13-CVE-2026-53277, UBUNTU-CVE-2026-53277.