CVE-2026-53020: um: Fix potential race condition in TLB sync

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-24 · updated 2026-07-15
Weakness: CWE-362

Description

In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race condition in TLB sync During the TLB sync, we need to traverse and modify the page table, so we should hold the page table lock. Since full SMP support for threads within the same process is still missing, let's disable the split page table lock for simplicity.

Affected products

Linux kernel: from 6.19 before 7.0.10 — fixed in 7.0.10

How to fix

Upgrade to a fixed version: Linux kernel 7.0.10. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/102331b66bcaf1f41f50b9c4cd5c36e46bafa9f3
https://git.kernel.org/stable/c/f21c343ec7419377bff89ab11146c03ae117036f

Get alerted when CVE-2026-53020 or the next vulnerability affects your stack