CVE-2026-53277

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking kvm->srcu. Fix by acquiring kvm->srcu prior to the table walk in both instances.

• CWE-662
• CWE-820

• https://git.kernel.org/stable/c/97706097f9b851cfe55c3b00b083dfc2bcf542bcPatch
• https://git.kernel.org/stable/c/ec42b4ed1b072ea2d03f086061aa67bad6d8de39Patch
• https://git.kernel.org/stable/c/f2ca45b50d4216c9cc7ffabf50d9ad1932209251Patch
• https://access.redhat.com/security/cve/CVE-2026-53277Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2492725Issue Tracking, Third Party Advisory
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53277.jsonThird Party Advisory

Published

Jun 25, 2026

Last Modified

Jul 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53271In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53272In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-53273In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-53274In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53275In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-53276In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-53278In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53279In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-5328A weakness has been identified in shsuishang modulithshop up…6.3
• CVE-2026-53280In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-53281In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-53282In the Linux kernel, the following vulnerability has been re…5.5