All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-53200
HIGHpublished 2026-06-25 09:16 UTC · 3 days ago · modified 2026-06-28 08:16 UTC
8.8
CVSS / 10
// description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX XN has already been extracted from its bitfield position so using FIELD_PREP() on the mask that clears XN[0] is completely broken, having the effect of unconditionally granting execute permissions... Fix the obvious mistake by manipulating the right bit.
// cvss 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H