VULNERABILITY INTELLIGENCE
CVE-2026-53200
CVSS score8.8 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-06-25
Last modified2026-07-06
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX XN has already been extracted from its bitfield position so using FIELD_PREP() on the mask that clears XN[0] is completely broken, having the effect of unconditionally granting execute permissions... Fix the obvious mistake by manipulating the right bit.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo