What’s Vulnerable › Vulnerabilities

CVE-2026-53054: drm/msm: Fix VM_BIND UNMAP locking

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-24 · updated 2026-07-21
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix VM_BIND UNMAP locking Wrong argument meant that the objs involved in UNMAP ops were not always getting locked. Since _NO_SHARE objs share a common resv with the VM (which is always locked) this would only show up with non-_NO_SHARE BOs. Patchwork: https://patchwork.freedesktop.org/patch/713898/

Affected products

• Linux kernel: from 6.17 before 6.18.33; from 6.19 before 7.0.10 — fixed in 6.18.33, 7.0.10

How to fix

Upgrade to a fixed version: Linux kernel 6.18.33, 7.0.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/206f812ef140727b75697111391ae320fd8aa652
• https://git.kernel.org/stable/c/85042c2cd970a6b0e686329387096fe19989ae62
• https://git.kernel.org/stable/c/d9ecf758270501b2e7a0bc1dd69a6f28f1ae3cae

Get alerted when CVE-2026-53054 or the next vulnerability affects your stack