CVE-2026-53377

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53377", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.401Z", "datePublished": "2026-07-19T10:02:00.168Z", "dateUpdated": "2026-10-30T12:27:06.437Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:27:06.437Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: always recover the gpu\n\nPreviously, in case there was no more work to do, recover worker\nwouldn't trigger recovery and would instead rely on the gpu going to\nsleep and then resuming when more work is submitted.\n\nRecover_worker will first increment the fence of the hung ring so, if\nthere's only one job submitted to a ring and that causes an hang, it\nwill early out.\n\nThere's no guarantee that the gpu will suspend and resume before more\nwork is submitted and if the gpu is in a hung state it will stay in that\nstate and probably trigger a timeout again.\n\nJust stop checking and always recover the gpu.\n\nPatchwork: https://patchwork.freedesktop.org/patch/704066/"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/msm/msm_gpu.c"], "versions": [{"version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "lessThan": "f8410426e46a8449a3734b037286cbafe0110033", "status": "affected", "versionType": "git"}, {"version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "lessThan": "01930f94b8b13400f3346044cacf98f01d337f3d", "status": "affected", "versionType": "git"}, {"version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "lessThan": "1c0034c1a614a118acbb4bdf7ab51490ee919ad2", "status": "affected", "versionType": "git"}, {"version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "lessThan": "132b8d51f0ffbee6e4e1ebbe1a50330aaf2dbd5d", "status": "affected", "versionType": "git"}, {"version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "lessThan": "2f5c90478749dfd9a32386100b6078a364298b01", "status": "affected", "versionType": "git"}, {"version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "lessThan": "01a0d6cd7032e9993feea19fadb03ef9d5b488f2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/msm/msm_gpu.c"], "versions": [{"version": "5.19", "status": "affected"}, {"version": "0", "lessThan": "5.19", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.114", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.32", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.9", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.12.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.18.32"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.0.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f8410426e46a8449a3734b037286cbafe0110033"}, {"url": "https://git.kernel.org/stable/c/01930f94b8b13400f3346044cacf98f01d337f3d"}, {"url": "https://git.kernel.org/stable/c/1c0034c1a614a118acbb4bdf7ab51490ee919ad2"}, {"url": "https://git.kernel.org/stable/c/132b8d51f0ffbee6e4e1ebbe1a50330aaf2dbd5d"}, {"url": "https://git.kernel.org/stable/c/2f5c90478749dfd9a32386100b6078a364298b01"}, {"url": "https://git.kernel.org/stable/c/01a0d6cd7032e9993feea19fadb03ef9d5b488f2"}], "title": "drm/msm: always recover the gpu", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/msm/msm_gpu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f8410426e46a8449a3734b037286cbafe0110033", "status": "affected", "version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "versionType": "git"}, {"lessThan": "01930f94b8b13400f3346044cacf98f01d337f3d", "status": "affected", "version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "versionType": "git"}, {"lessThan": "1c0034c1a614a118acbb4bdf7ab51490ee919ad2", "status": "affected", "version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "versionType": "git"}, {"lessThan": "132b8d51f0ffbee6e4e1ebbe1a50330aaf2dbd5d", "status": "affected", "version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "versionType": "git"}, {"lessThan": "2f5c90478749dfd9a32386100b6078a364298b01", "status": "affected", "version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "versionType": "git"}, {"lessThan": "01a0d6cd7032e9993feea19fadb03ef9d5b488f2", "status": "affected", "version": "c8af219d18502c52319df8d4e3dcfe29a3ca31ab", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/msm/msm_gpu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.19"}, {"lessThan": "5.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.32", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D7A527A-5C5D-47E8-BBCB-85F5AE9AED73", "versionEndExcluding": "6.18.32", "versionStartIncluding": "5.19.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "33ACA10B-B260-46EA-BD50-70EBE5097672", "versionEndExcluding": "7.0.9", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*", "matchCriteriaId": "9D759CCF-9E1B-41B2-81AA-CB580C5F3EEC", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*", "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*", "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*", "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*", "matchCriteriaId": "C178431E-AD82-4B3D-B70F-A273A02ABD5D", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc8:*:*:*:*:*:*", "matchCriteriaId": "2CF5D19C-C418-4B57-B52D-7795547F4096", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: always recover the gpu\n\nPreviously, in case there was no more work to do, recover worker\nwouldn't trigger recovery and would instead rely on the gpu going to\nsleep and then resuming when more work is submitted.\n\nRecover_worker will first increment the fence of the hung ring so, if\nthere's only one job submitted to a ring and that causes an hang, it\nwill early out.\n\nThere's no guarantee that the gpu will suspend and resume before more\nwork is submitted and if the gpu is in a hung state it will stay in that\nstate and probably trigger a timeout again.\n\nJust stop checking and always recover the gpu.\n\nPatchwork: https://patchwork.freedesktop.org/patch/704066/"}], "id": "CVE-2026-53377", "lastModified": "2026-10-30T13:19:17.133", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-07-19T11:16:38.847", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/01930f94b8b13400f3346044cacf98f01d337f3d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/01a0d6cd7032e9993feea19fadb03ef9d5b488f2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/132b8d51f0ffbee6e4e1ebbe1a50330aaf2dbd5d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1c0034c1a614a118acbb4bdf7ab51490ee919ad2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2f5c90478749dfd9a32386100b6078a364298b01"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f8410426e46a8449a3734b037286cbafe0110033"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: drm/msm: always recover the gpu", "id": "2502191", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502191"}, "csaw": false, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/msm: always recover the gpu\nPreviously, in case there was no more work to do, recover worker\nwouldn't trigger recovery and would instead rely on the gpu going to\nsleep and then resuming when more work is submitted.\nRecover_worker will first increment the fence of the hung ring so, if\nthere's only one job submitted to a ring and that causes an hang, it\nwill early out.\nThere's no guarantee that the gpu will suspend and resume before more\nwork is submitted and if the gpu is in a hung state it will stay in that\nstate and probably trigger a timeout again.\nJust stop checking and always recover the gpu.\nPatchwork: https://patchwork.freedesktop.org/patch/704066/", "A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) driver for Qualcomm Snapdragon Mobile (MSM) graphics processing units (GPUs). The GPU recovery mechanism, intended to reset the GPU after a hang, did not always activate when no new tasks were submitted. This oversight could allow the GPU to remain in an unresponsive state, potentially leading to a denial of service where GPU-dependent operations become unavailable."], "name": "CVE-2026-53377", "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53377\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53377\nhttps://lore.kernel.org/linux-cve-announce/2026071947-CVE-2026-53377-a415@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c8af219d18502c52319df8d4e3dcfe29a3ca31ab,132b8d51f0ffbee6e4e1ebbe1a50330aaf2dbd5d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c8af219d18502c52319df8d4e3dcfe29a3ca31ab,2f5c90478749dfd9a32386100b6078a364298b01)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c8af219d18502c52319df8d4e3dcfe29a3ca31ab,01a0d6cd7032e9993feea19fadb03ef9d5b488f2)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.32,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.9,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T12:30:03.399632+00:00", "updated": "2026-08-12T09:45:01.470358+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}