In the Linux kernel, the following vulnerability has been resolved:
mm/list_lru: drain before clearing xarray entry on reparent
memcg_reparent_list_lrus() clears the dying memcg's xarray entry with
xas_store(&xas, NULL) before reparenting its per-node lists into the
parent. This opens a window where a concurrent list_lru_del() arriving
for the dying memcg sees xa_load() == NULL, walks to the parent in
lock_list_lru_of_memcg(), takes the parent's per-node lock, and calls
list_del_init() on an item still physically linked on the dying memcg's
list.
If another in-flight thread holds the dying memcg's per-node lock at the
same moment (another list_lru_del, or a list_lru_walk_one running an
isolate callback), both threads modify ->next/->prev pointers on the same
physical list under different locks. Adjacent items can corrupt each
other's links.
Fix it by reversing the order: reparent each per-node list and mark the
child's list lru dead and then clear the xarray entry. Any concurrent
list_lru op that finds the still-set xarray entry either takes the dying
memcg's per-node lock (synchronizing with the drain) or sees LONG_MIN and
walks to the parent, where the items now live.
References
| Link | Resource |
|---|---|
| https://git.kernel.org/stable/c/2b66496d794e98f7aeec7688573051f22ec40bac | Patch |
| https://git.kernel.org/stable/c/98733f3f0becb1ae0701d021c1748e974e5fa55c | Patch |
| https://git.kernel.org/stable/c/c19ff4351214f059349788e13e70e74325831ff6 | Patch |
| https://access.redhat.com/security/cve/CVE-2026-53153 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2492790 | Third Party Advisory |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53153.json | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
08 Jul 2026, 13:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/2b66496d794e98f7aeec7688573051f22ec40bac - Patch | |
| References | () https://git.kernel.org/stable/c/98733f3f0becb1ae0701d021c1748e974e5fa55c - Patch | |
| References | () https://git.kernel.org/stable/c/c19ff4351214f059349788e13e70e74325831ff6 - Patch | |
| References | () https://access.redhat.com/security/cve/CVE-2026-53153 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2492790 - Third Party Advisory | |
| References | () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53153.json - Third Party Advisory | |
| First Time |
Linux linux Kernel
Redhat enterprise Linux Redhat Linux |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:* |
30 Jun 2026, 03:20
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | CWE-820 |
28 Jun 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
25 Jun 2026, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-25 09:16
Updated : 2026-07-15 01:16
NVD link : CVE-2026-53153
Mitre link : CVE-2026-53153
CVE.ORG link : CVE-2026-53153
JSON object : View
Products Affected
redhat
- enterprise_linux
linux
- linux_kernel
CWE