A vulnerability in the Linux kernel's arm64 early kernel memory mapping was identified and resolved. (CVE-2026-53288)
A vulnerability in the Linux kernel's arm64 early kernel memory mapping was identified and resolved. The issue involved insufficient reservation of extra pages for early kernel mapping, potentially causing an overflow of the final part of the data segment into an adjacent page. This was due to the early kernel mapping using 2MB block entries while kernel segments are only 64KB aligned, requiring additional page table pages for proper attribute application. The fix increased the allowance of early mapping pages to cover this additional split.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel arm64 architecture relates to early kernel memory mapping where the final part of the data segment could overflow into the next page reserved for early kernel stack due to misalignment between 2MB block entries and 64KB kernel segment boundaries. This overflow risk arose because the early mapper maps certain kernel text segments separately, requiring more page-table pages than previously accounted for. The resolution involved increasing the early mapping allowance by one page to prevent overflow and ensure proper memory attribute application.
Potential Impact
The vulnerability does not affect confidentiality or integrity but impacts availability (denial of service) due to potential memory overflow in early kernel mapping. This could cause kernel instability or crashes during early boot stages on affected arm64 systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or vendor advisory was provided in the input data. Monitor for updates from the Linux kernel maintainers and apply official fixes when available.
A vulnerability in the Linux kernel's arm64 early kernel memory mapping was identified and resolved. (CVE-2026-53288)
Description
A vulnerability in the Linux kernel's arm64 early kernel memory mapping was identified and resolved. The issue involved insufficient reservation of extra pages for early kernel mapping, potentially causing an overflow of the final part of the data segment into an adjacent page. This was due to the early kernel mapping using 2MB block entries while kernel segments are only 64KB aligned, requiring additional page table pages for proper attribute application. The fix increased the allowance of early mapping pages to cover this additional split.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel arm64 architecture relates to early kernel memory mapping where the final part of the data segment could overflow into the next page reserved for early kernel stack due to misalignment between 2MB block entries and 64KB kernel segment boundaries. This overflow risk arose because the early mapper maps certain kernel text segments separately, requiring more page-table pages than previously accounted for. The resolution involved increasing the early mapping allowance by one page to prevent overflow and ensure proper memory attribute application.
Potential Impact
The vulnerability does not affect confidentiality or integrity but impacts availability (denial of service) due to potential memory overflow in early kernel mapping. This could cause kernel instability or crashes during early boot stages on affected arm64 systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or vendor advisory was provided in the input data. Monitor for updates from the Linux kernel maintainers and apply official fixes when available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-24wq-6x4v-q3fv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53288"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4e4ed9c9d9e3dbe3288557
Added to database: 07/08/2026, 13:21:29 UTC
Last enriched: 07/08/2026, 13:32:30 UTC
Last updated: 07/31/2026, 19:24:46 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.