In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy powerpc uses… (CVE-2026-53109)
A high severity vulnerability (CVE-2026-53109) in the Linux kernel's powerpc architecture page table fragment handling was resolved. The issue involves improper handling of page state flags during the destruction of page table fragments, which can lead to a bad page state error and kernel BUG. This occurs in a corner case during process exit when reference counts and active flags are inconsistently managed, potentially causing use-after-free conditions. The vulnerability relates to the pte_frag_refcount and active flag management in pte_frag_destroy. No affected versions are explicitly stated. No known exploits in the wild have been reported.
AI Analysis
Technical Summary
CVE-2026-53109 addresses a flaw in the Linux kernel's powerpc pgtable-frag subsystem where the pte_frag_refcount and active flag on folios are improperly managed during pte_frag_destroy. Specifically, when all fragments are freed but the reference count still indicates unused fragments, and the process exits with a cached pte_frag folio, the active flag is not cleared before freeing. This leads to a bad page state and kernel BUG due to freeing a folio with the active flag set. The patch involves clearing the active flag before calling pagetable destructor and free functions during process exit to prevent this inconsistent state.
Potential Impact
The vulnerability can cause kernel crashes (BUG) due to bad page state errors in the powerpc architecture's page table fragment handling. This may lead to denial of service or potential memory corruption due to use-after-free conditions. The CVSS vector indicates high impact on confidentiality, integrity, and availability. No known exploits have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by properly clearing the active flag before freeing page table fragments during process exit. Since no explicit patch links or affected versions are provided, users should apply the latest Linux kernel updates that include this fix. Patch status is not yet confirmed in this data; check the official Linux kernel advisories or vendor sources for the current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy powerpc uses… (CVE-2026-53109)
Description
A high severity vulnerability (CVE-2026-53109) in the Linux kernel's powerpc architecture page table fragment handling was resolved. The issue involves improper handling of page state flags during the destruction of page table fragments, which can lead to a bad page state error and kernel BUG. This occurs in a corner case during process exit when reference counts and active flags are inconsistently managed, potentially causing use-after-free conditions. The vulnerability relates to the pte_frag_refcount and active flag management in pte_frag_destroy. No affected versions are explicitly stated. No known exploits in the wild have been reported.
CVSS v3.1
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-53109 addresses a flaw in the Linux kernel's powerpc pgtable-frag subsystem where the pte_frag_refcount and active flag on folios are improperly managed during pte_frag_destroy. Specifically, when all fragments are freed but the reference count still indicates unused fragments, and the process exits with a cached pte_frag folio, the active flag is not cleared before freeing. This leads to a bad page state and kernel BUG due to freeing a folio with the active flag set. The patch involves clearing the active flag before calling pagetable destructor and free functions during process exit to prevent this inconsistent state.
Potential Impact
The vulnerability can cause kernel crashes (BUG) due to bad page state errors in the powerpc architecture's page table fragment handling. This may lead to denial of service or potential memory corruption due to use-after-free conditions. The CVSS vector indicates high impact on confidentiality, integrity, and availability. No known exploits have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by properly clearing the active flag before freeing page table fragments during process exit. Since no explicit patch links or affected versions are provided, users should apply the latest Linux kernel updates that include this fix. Patch status is not yet confirmed in this data; check the official Linux kernel advisories or vendor sources for the current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-r4jc-xrhv-v4rj
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53109"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a629b119c2644c7f8d8655b
Added to database: 07/23/2026, 22:52:01 UTC
Last enriched: 07/23/2026, 22:54:29 UTC
Last updated: 07/24/2026, 00:38:43 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.