{"id":"CVE-2026-53314","title":"padata: Put CPU offline callback in ONLINE section to allow failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\npadata: Put CPU offline callback in ONLINE section to allow failure\n\nsyzbot reported the following warning:\n\n    DEAD callback error for CPU1\n    WARNING: kernel/cpu.c:…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 65dae8b34f0810f3fa9f77c4c63650cd20820693","Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < a6d44f477000c6352de6b05e9e276e62083e5fbf","Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 3e6c08dd97dcd22a00aee469e0adfa819071d80e","Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 5a9f29a3e076b637d2234093e57989cf755ded5b","Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3","Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < c8c4a2972f83c8b68ff03b43cecdb898939ff851","Linux 2b1207801c393a5e9af2fbac2dd8b0377d8ae63a","Linux 0685dfa0a2ff7635c0b64f7b7f0fafbf1c3e0c14","Linux 3f4d3d010477365ee1aefedc3ad52563740b777e","Linux >= 4.19.202 < 4.20","Linux >= 5.4.22 < 5.5","Linux >= 5.5.6 < 5.6","Linux 5.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:26:23.084506Z"},"published":"2026-06-26","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:20.026Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53314","references":[{"url":"https://git.kernel.org/stable/c/65dae8b34f0810f3fa9f77c4c63650cd20820693"},{"url":"https://git.kernel.org/stable/c/a6d44f477000c6352de6b05e9e276e62083e5fbf"},{"url":"https://git.kernel.org/stable/c/3e6c08dd97dcd22a00aee469e0adfa819071d80e"},{"url":"https://git.kernel.org/stable/c/5a9f29a3e076b637d2234093e57989cf755ded5b"},{"url":"https://git.kernel.org/stable/c/9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3"},{"url":"https://git.kernel.org/stable/c/c8c4a2972f83c8b68ff03b43cecdb898939ff851"}],"tags":["cve.org"],"epss":0.00118,"epssPercentile":0.01746,"ingestedAt":"2026-11-06T16:57:43.249Z","slug":"CVE-2026-53314","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npadata: Put CPU offline callback in ONLINE section to allow failure\n\nsyzbot reported the following warning:\n\n    DEAD callback error for CPU1\n    WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614\n\nat commit 4ae12d8bd9a8 (\"Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux\")\nwhich tglx traced to padata_cpu_dead() given it's the only\nsub-CPUHP_TEARDOWN_CPU callback that returns an error.\n\nFailure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU\nso move the CPU offline callback to the ONLINE section where failure is\npossible.\n\n## Affected\n\n- `Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 65dae8b34f0810f3fa9f77c4c63650cd20820693`\n- `Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < a6d44f477000c6352de6b05e9e276e62083e5fbf`\n- `Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 3e6c08dd97dcd22a00aee469e0adfa819071d80e`\n- `Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 5a9f29a3e076b637d2234093e57989cf755ded5b`\n- `Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3`\n- `Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < c8c4a2972f83c8b68ff03b43cecdb898939ff851`\n- `Linux 2b1207801c393a5e9af2fbac2dd8b0377d8ae63a`\n- `Linux 0685dfa0a2ff7635c0b64f7b7f0fafbf1c3e0c14`\n- `Linux 3f4d3d010477365ee1aefedc3ad52563740b777e`\n- `Linux >= 4.19.202 < 4.20`\n- `Linux >= 5.4.22 < 5.5`\n- `Linux >= 5.5.6 < 5.6`\n- `Linux 5.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}