CVE-2026-53207
kernel: mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 25, 2026
Updated · July 3, 2026
Description
A flaw was found in the Linux kernel's memory management, specifically concerning huge pages. When two concurrent memory poisoning operations (madvise(MADV_HWPOISON)) occur on the same huge page while it is also being unmapped, a recursive spinlock self-deadlock can be triggered. This can lead to a system deadlock, resulting in a Denial of Service (DoS) where the system becomes unresponsive.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock