CVE-2026-53354
kernel: arm64: errata: Mitigate TLBI errata on various Arm CPUs
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 1, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel, affecting systems running on certain Arm processors. This vulnerability involves an issue with how the system handles Translation Lookaside Buffer Invalidation (TLBI) operations. Specifically, a sequence of operations intended to invalidate memory translations may complete before all related memory writes are fully observed across the system. This could lead to inconsistencies in memory access, although the TLB entries themselves are correctly invalidated.
Statement
This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux and Red Hat In-Vehicle OS because it is restricted to systems running on affected 64-bit ARM hardware and requires local access with precise timing conditions to exploit. Successful exploitation relies on a race window during translation invalidations, making reliable exploitation difficult in standard operating environments. Other architectures, including x86_64, are not impacted by this hardware-specific CPU erratum.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-1037 · Processor Optimization Removal or Modification of Security-critical Code