PT-2026-61078 · Linux · Linux Kernel

CVE-2026-53373 · Published 2026-07-19 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mm/vma component where the mmap prepare() function incorrectly attempts to unmap a Virtual Memory Area (VMA) when invoked from the mmap() hook of stacked drivers, such as overlayfs or shm. In these cases, the mmap() hook provides a detached VMA pointer that is not yet fully established. Attempting to unmap a VMA in this state triggers a warning in the vma mark detached() function because the VMA is already detached. This cleanup is unnecessary as the mmap() handler is responsible for cleaning up the VMA upon encountering an error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53373

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53373 · Security Note
• https://twitter.com/DFIR_Lab/status/2079377190244737436 · Twitter Post
• https://git.kernel.org/stable/c/619eab23e1ce7c97e54bfc5a417306d94b3f6f13 · Note
• https://twitter.com/VulmonFeeds/status/2078827998472495403 · Twitter Post
• https://git.kernel.org/stable/c/5394bcb746503f2ae4b206212416dccea78e3773 · Note