CVE-2026-53354 Details
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of CPUs developed by Arm suffer from errata whereby a broadcast TLBI;DSB sequence may complete before the global observation of writes which are translated by an affected TLB entry. These errata ONLY affect the completion of memory accesses which have been translated by an invalidated TLB entry, and these errata DO NOT affect the actual invalidation of TLB entries. TLB entries are removed correctly. This issue has been assigned CVE ID CVE-2025-10263. To mitigate this issue, Arm recommends that software follows any affected TLBI;DSB sequence with an additional TLBI;DSB, which will ensure that all memory write effects affected by the first TLBI have been globally observed. The additional TLBI can use any operation that is broadcast to affected CPUs, and the additional DSB can use any option that is sufficient to complete the additional TLBI. The ARM64_WORKAROUND_REPEAT_TLBI workaround is sufficient to mitigate the issue. Enable this workaround for affected CPUs, and update the silicon errata documentation accordingly. Note that due to the manner in which Arm develops IP and tracks errata, some CPUs share a common erratum number.
A vulnerability exists in the Linux kernel for arm64 architecture, affecting various Arm CPUs. This vulnerability arises from errata in these CPUs, where a broadcast TLB invalidation followed by a Data Synchronization Barrier may complete prematurely. As a result, the global acknowledgment of memory writes, which are impacted by the invalidated TLB entry, may be delayed. This issue specifically disrupts the completion of memory operations linked to the affected TLB entries, although the TLB invalidation process itself functions correctly. To address this, the kernel provides a workaround by allowing an additional TLB invalidation and Data Synchronization Barrier to ensure proper memory write acknowledgment. This vulnerability has been assigned the CVE ID CVE-2025-10263.
Users can enable the ARM64_WORKAROUND_REPEAT_TLBI option in the kernel configuration to mitigate this issue. This option adds the necessary additional TLB invalidation and Data Synchronization Barrier operations to ensure proper memory write acknowledgment. After configuring the kernel, it should be recompiled and installed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1268c64e2bcb6e968152990e87bd10c440fcc9c0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1b47b1e1d8675fdf5f6e11e7fa19c704d8c6f5cd | kernel.org | Patch |
| https://git.kernel.org/stable/c/4e7c80742e6dada9f8b9ad63f3a49c03af07ecb8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7c3ad9365079e716b57d2363d3081ee7680cc18e | kernel.org | Patch |
| https://git.kernel.org/stable/c/8364384ae82fbffdf8968abaac3455ed854da18d | kernel.org | Patch |
| https://git.kernel.org/stable/c/925058203229403008d77a52b1e63e2ae5f4a3cf | kernel.org | Patch |
| https://git.kernel.org/stable/c/cfd391e74134db664feb499d43af286380b10ba8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d4fd4282204044fdedd1e42abbe70a9206f74ec0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e717a4d08779f1a28d6e0275e75040b12c33c753 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.7, < 5.10.259 >= 5.11, < 5.15.210 >= 5.16, < 6.1.176 >= 6.2, < 6.6.143 >= 6.7, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 >= 7.1, < 7.1.1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 22, 2026 | Initial Analysis | [email protected] |
| Jul 18, 2026 | CVE Modified | kernel.org |
| Jul 10, 2026 | CVE Modified | kernel.org |
| Jul 1, 2026 | New CVE Received | kernel.org |