🔴 《高危安全漏洞:CVE-2026-53277》

CVSS 评分: 高危(8.8)  CVE ID: CVE-2026-53277


漏洞描述

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

walk_s1() and kvm_walk_nested_s2() expect to be called while holding
kvm->srcu to guard against memslot changes. While this is generally
the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the
respective walkers without taking kvm->srcu.

Fix by acquiring kvm->srcu prior to the table walk in both instances.


字段
CVE ID CVE-2026-53277
CVSS 评分 8.8
严重程度 高危
发布时间 2026-06-25
状态 Received

数据来源: NVD | 获取时间: 2026-06-28 18:15