By weakness (CWE)

CWE-820: related vulnerabilities

CVEs classified under CWE-820. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

2 published vulnerabilities

• CVE-2026-53277HIGH 8.8

  CVE-2026-53277 is a synchronization bug in the Linux kernel's KVM (Kernel-based Virtual Machine) hypervisor for ARM64 systems. The vulnerability occurs when certain hypervisor operations that walk guest page tables fail to hold a required kernel lock (SRCU) that protects against concurrent memory slot changes. An attacker with local access and low privileges could exploit this race condition to cause memory corruption, information disclosure, or denial of service across privilege boundaries, including from a guest VM context into the host kernel.

• CVE-2026-53153HIGH 7.8

  CVE-2026-53153 is a race condition in the Linux kernel's memory management subsystem that can corrupt data structures in a process's memory. The vulnerability exists in how the kernel handles the cleanup of list management structures when a memory control group (memcg) is being terminated. When a memcg is shutting down, the kernel must transfer its list entries to the parent memcg before removing references to the old structure. Due to a timing gap between these operations, a concurrent thread may modify list pointers under the wrong lock, causing adjacent memory items to corrupt each other. A local attacker with unprivileged access can trigger this race condition to achieve privilege escalation or system instability.