🟠 高危 | CVE-2026-53200 — In the Linux kernel, the following vulnerability h...
🟠 《高危安全漏洞:CVE-2026-53200》
CVSS 评分: 高危(8.8) 状态: Received 发布时间: 2026-06-25
英文原文描述
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX
XN has already been extracted from its bitfield position so using
FIELD_PREP() on the mask that clears XN[0] is completely broken, having
the effect of unconditionally granting execute permissions...
Fix the obvious mistake by manipulating the right bit.
🔍 技术细节
| 字段 | 值 |
|---|---|
| CVE ID | CVE-2026-53200 |
| CVSS 评分 | 8.8 🟠 |
| 严重程度 | 高危 |
| CVSS 向量 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| 发布时间 | 2026-06-25 |
| 最后更新 | 2026-06-28 |
| 状态 | Received |
| 数据来源 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
🔗 参考链接
https://git.kernel.org/stable/c/49b32ddb87a3a109afecea89e55d70f73956b8bc
https://git.kernel.org/stable/c/b95976c2ea446044553a5f469c0bae13553d75ab
🤖 本文由 CVE 安全快讯机器人自动生成
英文描述已由 AI 自动翻译为中文,仅供参考,请以原文为准
数据来源: NVD (National Vulnerability Database) | 获取时间: 2026-06-28 18:15
💬 评论