CVE-2026-53200

HighCVSS 8.8/10Last modified Jul 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX

XN has already been extracted from its bitfield position so using FIELD_PREP() on the mask that clears XN[0] is completely broken, having the effect of unconditionally granting execute permissions...

Fix the obvious mistake by manipulating the right bit.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= d93febe2ed2e0491af9d47f0ee6d4b01918877f4, < b95976c2ea446044553a5f469c0bae13553d75ab; >= d93febe2ed2e0491af9d47f0ee6d4b01918877f4, < 49b32ddb87a3a109afecea89e55d70f73956b8bc
LinuxLinux6.19

References

Timeline

Published
Jun 25, 2026
Last modified
Jul 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-532017.8In the Linux kernel, the following vulnerability has been resolved: Revert "drm/xe: Skip exec queue schedule toggle if queue is idle duringCVE-2026-532027.8In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potentialCVE-2026-532037.1In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validatCVE-2026-532045.5In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsu_send_msg() timeout in prCVE-2026-532057.1In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds checks for firmware log indices Add validation CVE-2026-532065.5In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate thatCVE-2026-532075.5In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwCVE-2026-532085.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/blueCVE-2026-532097.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend ECVE-2026-53214.3A flaw has been found in vanna-ai vanna up to 2.0.2. Affected by this issue is some unknown functionality of the component FastAPI/Flask SerCVE-2026-532105.5In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in register_shm_helper() register_shm_helper() CVE-2026-532115.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix stale stack leak via IIFHWADDR register
CVE-2026-53200: High severity, CVSS 8.8 | Vulnix