目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

CVE-2026-53354— Arm CPUs TLBI漏洞缓解

AI 预测 5.3 利用难度: 理论可行

可能的 ATT&CK 技术 1AI

T1620 · Reflective Code Loading
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2026-53354 基础信息

漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
arm64: errata: Mitigate TLBI errata on various Arm CPUs
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Mitigate TLBI errata on various Arm CPUs A number of CPUs developed by Arm suffer from errata whereby a broadcast TLBI;DSB sequence may complete before the global observation of writes which are translated by an affected TLB entry. These errata ONLY affect the completion of memory accesses which have been translated by an invalidated TLB entry, and these errata DO NOT affect the actual invalidation of TLB entries. TLB entries are removed correctly. This issue has been assigned CVE ID CVE-2025-10263. To mitigate this issue, Arm recommends that software follows any affected TLBI;DSB sequence with an additional TLBI;DSB, which will ensure that all memory write effects affected by the first TLBI have been globally observed. The additional TLBI can use any operation that is broadcast to affected CPUs, and the additional DSB can use any option that is sufficient to complete the additional TLBI. The ARM64_WORKAROUND_REPEAT_TLBI workaround is sufficient to mitigate the issue. Enable this workaround for affected CPUs, and update the silicon errata documentation accordingly. Note that due to the manner in which Arm develops IP and tracks errata, some CPUs share a common erratum number.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ~ 925058203229403008d77a52b1e63e2ae5f4a3cf -
LinuxLinux 5.10.259 ~ 5.10.* -

二、漏洞 CVE-2026-53354 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-53354 的情报信息

登录查看更多情报信息。

CVE-2026-53354 补丁与修复 (9)

同批安全公告 · Linux · 2026-07-01 · 共 31 条

CVE-2026-53339i2c: qcom-cci NULL指针解引用漏洞
CVE-2026-53326Linux内核debugobjects早期启动硬中断上下文远程代码执行漏洞
CVE-2026-53327debugobjects 在 pi_blocked_on 时不填充 pool 的漏洞
CVE-2026-53328sched_ext: scx_cgroup_move_task NULL cgrp_moving_from警告漏洞
CVE-2026-53329AMD Display krealloc_array 函数越界写入漏洞
CVE-2026-53330AMD Display 驱动 dp_get_eq_aux_rd_interval 越界读取漏洞
CVE-2026-53331Slimbus qcom-ngd-ctrl tx_lock/ctrl->锁ABBA死锁漏洞
CVE-2026-53332Slimbus qcom-ngd-ctrl 回调注册顺序漏洞
CVE-2026-53334mm/damon/reclaim 上下文分配失败处理
CVE-2026-53333mm/mincore: 处理非交换条目前添加!CONFIG_SWAP守卫
CVE-2026-53335Linux DAMON LRU排序上下文分配失败处理漏洞
CVE-2026-53336nvmem: onie-tlv 布局未知类型导致挂起漏洞
CVE-2026-53337Linux 内核 bond_do_ioctl() NULL指针解引用漏洞
CVE-2026-53338Airoha 网卡驱动 NULL 指针解引用漏洞
CVE-2026-53340i2c: imx修复运行时电源管理中的时钟和pinctrl状态不一致漏洞
CVE-2026-53356Intel i915 DRM物理缓冲区偏移预读/预写漏洞
CVE-2026-53342ARM64 内存管理 热移除页表未调用析构函数漏洞
CVE-2026-53341Linux fhandle UAF漏洞:may_decode_fh()未锁定读取mnt_ns
CVE-2026-53343ARM KASAN VMAP栈影子内存字节加载漏洞
CVE-2026-53344mcp23s08 引脚控制器初始化缺陷

显示前 20 条,共 31 条。 查看全部 → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-53354

暂无评论


发表评论