CVE-2026-53109

highCVSS 5.5covered by 9 sourcesfirst seen 2026-06-09

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 platform drivers; - Cryptographic API; - PSP security protocol; - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Intel NPU Driver; - Compute Acceleration Framework; - ACPI drivers; - Auxiliary display drivers; - Drivers core; - DRBD Distributed Replicated Block Device drivers; - Rados block device (RBD) driver; - Ublk userspace block driver; - Compressed RAM block device driver; - Bluetooth drivers; - Bus devices; - Character device driver; - Clock framework and drivers; - CPU frequency scaling framework; - Hardware crypto device drivers; - Buffer Sharing and Synchronization framework; - DPLL subsystem; - EDAC drivers; - Arm Firmware Framework for ARMv8-A(FFA); - EFI core; - FWCTL subsystem; - GPIO subsystem; - GPU drivers; - HID subsystem; - Hardware monitoring drivers; - I2C subsystem; - I3C subsystem; - IIO ADC drivers; - IIO subsystem; - InfiniBand drivers; - Input Device core drivers; - Input Device (Mouse) drivers; - IOMMU subsystem; - Mailbox framework; - Multiple devices driver; - Media drivers; - NVIDIA Tegra memory controller driver; - MTD block device drivers; - Network drivers; - Ethernet bonding driver; - Mellanox network drivers; - Microsoft Azure Network Adapter (MANA) driver; - STMicroelectronics network drivers; - Texas Instruments network drivers; - MediaTek network drivers; - NVME drivers; - Parport drivers; - PCI subsystem; - PHY drivers; -

CSIRTS triage

What: A medium severity issue related to bad page state exists in the pte_frag_destroy function of powerpc/pgtable-frag.
Who is affected: Deployments using the powerpc/pgtable-frag are affected.
Urgency: Remediation is advisable due to the medium severity of the vulnerability.
Action: Apply the latest patches to address this issue.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-53109

Get an email if CVE-2026-53109 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Advisory coverage (9)

unknownUSN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilitiesubuntu · 2026-08-20
unknownUSN-8663-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu · 2026-08-20
highUSN-8618-1: Linux kernel vulnerabilitiesubuntu · 2026-07-28
highUSN-8603-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-07-24
highUSN-8593-1: Linux kernel vulnerabilitiesubuntu · 2026-07-23
highUSN-8569-1: Linux kernel (HWE) vulnerabilitiesubuntu · 2026-07-20
highUSN-8568-1: Linux kernel (OEM) vulnerabilitiesubuntu · 2026-07-20
highUSN-8566-1: Linux kernel vulnerabilitiesubuntu · 2026-07-20
mediumCVE-2026-53109: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroymsrc · 2026-06-09

External references

NVD record for CVE-2026-53109

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-53109 status](https://www.csirts.com/badge/CVE-2026-53109)](https://www.csirts.com/cve/CVE-2026-53109)