CVE-2026-53200

high

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX XN has already been extracted from its bitfield position so using FIELD_PREP() on the mask that clears XN[0] is completely broken, having the effect of unconditionally granting execute permissions... Fix the obvious mistake by manipulating the right bit.

References

https://git.kernel.org/stable/c/b95976c2ea446044553a5f469c0bae13553d75ab

https://git.kernel.org/stable/c/49b32ddb87a3a109afecea89e55d70f73956b8bc

Details

Source: Mitre, NVD

Published: 2026-06-25

Updated: 2026-06-28

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00162