CVE-2026-53108
kernel: powerpc/64s: Fix unmap race with PMD migration entries
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · November 2, 2026
Description
A flaw was found in the Linux kernel. A race condition exists between the move_pages system call, which sets up a Page Middle Directory (PMD) migration entry, and the munmap system call, which unmaps memory regions. This race can be exploited by a local user to trigger a kernel bug, causing a system crash and resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as Moderate because it is limited to a local denial of service on 64-bit PowerPC (Book3S) hardware and cannot be leveraged for privilege escalation or data exposure. The flaw stems from a timing window in PowerPC page table handling when migrating large memory pages concurrently with memory unmapping, resulting in a kernel panic. Systems running on other architectures, such as x86_64, aarch64, or s390x, are unaffected by this platform-specific issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition