CVE-2026-53314
padata: Put CPU offline callback in ONLINE section to allow failure
Description
In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614 at commit 4ae12d8bd9a8 ("Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux") which tglx traced to padata_cpu_dead() given it's the only sub-CPUHP_TEARDOWN_CPU callback that returns an error. Failure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU so move the CPU offline callback to the ONLINE section where failure is possible.
INFO
Published Date :
June 26, 2026, 8:17 p.m.
Last Modified :
July 6, 2026, 8:13 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Apply the kernel patch for commit 4ae12d8bd9a8.
- Ensure CPU hotplug operations handle callback failures.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-53314.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-53314 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-53314
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-53314 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-53314 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jul. 06, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.141 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.91 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.33 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.10 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.19.202 up to (excluding) 4.20 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4.22 up to (excluding) 5.5 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5.6 up to (excluding) 6.1.175 Added Reference Type kernel.org: https://git.kernel.org/stable/c/3e6c08dd97dcd22a00aee469e0adfa819071d80e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/5a9f29a3e076b637d2234093e57989cf755ded5b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/65dae8b34f0810f3fa9f77c4c63650cd20820693 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/a6d44f477000c6352de6b05e9e276e62083e5fbf Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c8c4a2972f83c8b68ff03b43cecdb898939ff851 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 26, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '894c9ef9780c5cf2f143415e867ee39a33ecb75d', 'lessThan': '65dae8b34f0810f3fa9f77c4c63650cd20820693', 'versionType': 'git'}, {'status': 'affected', 'version': '894c9ef9780c5cf2f143415e867ee39a33ecb75d', 'lessThan': 'a6d44f477000c6352de6b05e9e276e62083e5fbf', 'versionType': 'git'}, {'status': 'affected', 'version': '894c9ef9780c5cf2f143415e867ee39a33ecb75d', 'lessThan': '3e6c08dd97dcd22a00aee469e0adfa819071d80e', 'versionType': 'git'}, {'status': 'affected', 'version': '894c9ef9780c5cf2f143415e867ee39a33ecb75d', 'lessThan': '5a9f29a3e076b637d2234093e57989cf755ded5b', 'versionType': 'git'}, {'status': 'affected', 'version': '894c9ef9780c5cf2f143415e867ee39a33ecb75d', 'lessThan': '9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3', 'versionType': 'git'}, {'status': 'affected', 'version': '894c9ef9780c5cf2f143415e867ee39a33ecb75d', 'lessThan': 'c8c4a2972f83c8b68ff03b43cecdb898939ff851', 'versionType': 'git'}, {'status': 'affected', 'version': '2b1207801c393a5e9af2fbac2dd8b0377d8ae63a', 'versionType': 'git'}, {'status': 'affected', 'version': '0685dfa0a2ff7635c0b64f7b7f0fafbf1c3e0c14', 'versionType': 'git'}, {'status': 'affected', 'version': '3f4d3d010477365ee1aefedc3ad52563740b777e', 'versionType': 'git'}, {'status': 'affected', 'version': '4.19.202', 'lessThan': '4.20', 'versionType': 'semver'}, {'status': 'affected', 'version': '5.4.22', 'lessThan': '5.5', 'versionType': 'semver'}, {'status': 'affected', 'version': '5.5.6', 'lessThan': '5.6', 'versionType': 'semver'}], 'programFiles': ['include/linux/cpuhotplug.h', 'include/linux/padata.h', 'kernel/padata.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.6'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.6', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.1.175', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.141', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.91', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.33', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.10', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['include/linux/cpuhotplug.h', 'include/linux/padata.h', 'kernel/padata.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614 at commit 4ae12d8bd9a8 ("Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux") which tglx traced to padata_cpu_dead() given it's the only sub-CPUHP_TEARDOWN_CPU callback that returns an error. Failure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU so move the CPU offline callback to the ONLINE section where failure is possible. Added Reference https://git.kernel.org/stable/c/3e6c08dd97dcd22a00aee469e0adfa819071d80e Added Reference https://git.kernel.org/stable/c/5a9f29a3e076b637d2234093e57989cf755ded5b Added Reference https://git.kernel.org/stable/c/65dae8b34f0810f3fa9f77c4c63650cd20820693 Added Reference https://git.kernel.org/stable/c/9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3 Added Reference https://git.kernel.org/stable/c/a6d44f477000c6352de6b05e9e276e62083e5fbf Added Reference https://git.kernel.org/stable/c/c8c4a2972f83c8b68ff03b43cecdb898939ff851