{
  "cveId": "CVE-2026-53342",
  "url": "https://patchblox.com/security/cve/CVE-2026-53342",
  "summary": "CVE-2026-53342 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2026-53342, released July 2, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: mm: call pagetable dtor when freeing hot-...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  arm64: mm: call pagetable dtor when freeing hot-removed page tables  Since 5e8eb9aeeda3 (\u0022arm64: mm: always call PTE/PMD ctor in __create_pgd_mapping()\u0022) page-table allocation on ARM64 always calls pagetable_{pte,pmd,pud,p4d}_ctor().  This sets the page_type to PGTY_table, increments NR_PAGETABLE and possible allocates a PTL.  However the matching pagetable_dtor() calls were never added.  With DEBUG_VM enabled on kernel versions prior to v6.17 without 2dfcd1608f3a9 (\u0022mm/page_alloc: let page freeing clear any set page type\u0022) this leads to the following warning when freeing these pages due to page-\u003Epage_type sharing page-\u003E_mapcount:    BUG: Bad page state in process ... pfn:284fbb   page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x284fbb   flags: 0x17fffc000000000(node=0|zone=2|lastcpupid=0x1ffff)   page_type: f2(table)   page dumped because: nonzero mapcount   Call trace:    bad_page\u002B0x13c/0x160    __free_frozen_pages\u002B0x6cc/0x860    ___free_pages\u002B0xf4/0x180    free_pages\u002B0x54/0x80    free_hotplug_page_range.part.0\u002B0x58/0x90    free_empty_tables\u002B0x438/0x500    __remove_pgd_mapping.constprop.0\u002B0x60/0xa8    arch_remove_memory\u002B0x48/0x80    try_remove_memory\u002B0x158/0x1d8    offline_and_remove_memory\u002B0x138/0x180  It can also lead to leaking the ptl allocation if ALLOC_SPLIT_PTLOCKS is defined and incorrect NR_PAGETABLE stats.  Fix this by calling pagetable_dtor() in free_hotplug_pgtable_page() prior to freeing the page to undo the effects of calling pagetable_*_ctor().",
  "published": "2026-07-01T14:16:42Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.0016,
  "epssPercentile": 0.05197,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.36-69.134",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.0.13-1",
      "fix": "DEBIAN-CVE-2026-53342",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-53342",
      "released": "2026-07-02T14:46:03Z"
    },
    {
      "platform": "linux",
      "product": "microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.36-69.134.amzn2023",
      "fix": "ALAS2023-2026-1925",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925",
      "released": "2026-07-06T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}