SB2026062648 - Race condition in Linux kernel arm64 kvm

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-53277)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a race condition in arm64 KVM page table walk handling when performing fault injection and address translation emulation. A local user can trigger page table walks without the required SRCU protection to cause a denial of service.

The issue affects calls to __kvm_at_s12() and __kvm_find_s1_desc_level() that invoke nested stage-2 and stage-1 walkers without holding kvm->srcu.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/97706097f9b851cfe55c3b00b083dfc2bcf542bc
• https://git.kernel.org/stable/c/ec42b4ed1b072ea2d03f086061aa67bad6d8de39
• https://git.kernel.org/stable/c/f2ca45b50d4216c9cc7ffabf50d9ad1932209251