Threats tagged 'ghsa-24wq-6x4v-q3fv'

CVE-2026-53288 is a medium-severity vulnerability in the Linux kernel on arm64 architectures involving early kernel memory mapping. The issue arises because the final part of a kernel data segment may overflow into the next page reserved for early kernel stack mapping. This is due to the use of 2MB block entries for early kernel mapping while kernel segments are only 64KB aligned, causing segment boundaries to fall within a 2MB block and requiring additional page table pages. A recent kernel change added an extra early-only split mapping, which was not accounted for in the reserved page allowance, potentially leading to overflow. The vulnerability has been resolved by increasing the early mapping allowance by one page to cover the additional split.