Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-53200

KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX XN has already been extracted from its bitfield position so using FIELD_PREP() on the mask that clears XN[0] is completely broken, having the effect of unconditionally granting execute permissions... Fix the obvious mistake by manipulating the right bit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d93febe2ed2e0491af9d47f0ee6d4b01918877f4 to < b95976c2ea446044553a5f469c0bae13553d75abaffected
  • d93febe2ed2e0491af9d47f0ee6d4b01918877f4 to < 49b32ddb87a3a109afecea89e55d70f73956b8bcaffected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 7.0.13 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References