CVE-2026-53314None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
padata: Put CPU offline callback in ONLINE section to allow failure
syzbot reported the following warning:
DEAD callback error for CPU1
WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614
at commit 4ae12d8bd9a8 ("Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux") which tglx traced to padata_cpu_dead() given it's the only sub-CPUHP_TEARDOWN_CPU callback that returns an error.
Failure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU so move the CPU offline callback to the ONLINE section where failure is possible.
Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 65dae8b34f0810f3fa9f77c4c63650cd20820693Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < a6d44f477000c6352de6b05e9e276e62083e5fbfLinux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 3e6c08dd97dcd22a00aee469e0adfa819071d80eLinux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 5a9f29a3e076b637d2234093e57989cf755ded5bLinux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < 9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3Linux >= 894c9ef9780c5cf2f143415e867ee39a33ecb75d < c8c4a2972f83c8b68ff03b43cecdb898939ff851Linux 2b1207801c393a5e9af2fbac2dd8b0377d8ae63aLinux 0685dfa0a2ff7635c0b64f7b7f0fafbf1c3e0c14Linux 3f4d3d010477365ee1aefedc3ad52563740b777eLinux >= 4.19.202 < 4.20Linux >= 5.4.22 < 5.5Linux >= 5.5.6 < 5.6Linux 5.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses