CVE-2026-53314

padata: Put CPU offline callback in ONLINE section to allow failure

MEDIUM

5.5

CVSS Score

Published: June 26, 2026 at 07:41 PM UTC

Updated: July 6, 2026 at 08:33 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section to allow failure syzbot reported the following warning: DEAD callback error for CPU1 WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020 kernel/cpu.c:1463, CPU#0: syz.0.1960/14614 at commit 4ae12d8bd9a8 ("Merge tag 'kbuild-fixes-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/kbuild/linux") which tglx traced to padata_cpu_dead() given it's the only sub-CPUHP_TEARDOWN_CPU callback that returns an error. Failure isn't allowed in hotplug states before CPUHP_TEARDOWN_CPU so move the CPU offline callback to the ONLINE section where failure is possible.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 4.19.202v ≥ 5.4.22v ≥ 5.5.64.19.202 ≤ v < 4.205.4.22 ≤ v < 5.55.5.6 ≤ v < 5.65.5.6 ≤ v < 6.1.1755.6 ≤ v < 6.1.1755.6 ≤ v < 6.12.915.6 ≤ v < 6.18.335.6 ≤ v < 6.6.1415.6 ≤ v < 7.0.105.6 ≤ v < 7.16.13 ≤ v < 6.18.336.19 ≤ v < 7.0.106.2 ≤ v < 6.6.1416.7 ≤ v < 6.12.912b1207801c393a5e9af2fbac2dd8b0377d8ae63a3f4d3d010477365ee1aefedc3ad52563740b777e4.19.202 5.4.22 5.5.6 5.6685dfa0a2ff7635c0b64f7b7f0fafbf1c3e0c14894c9ef9780c5cf2f143415e867ee39a33ecb75d

Vendor states this is fixed in 3e6c08dd97dcd22a00aee469e0adfa819071d80e (fixed)

Vendor states this is fixed in 5a9f29a3e076b637d2234093e57989cf755ded5b (fixed)

Vendor states this is fixed in 65dae8b34f0810f3fa9f77c4c63650cd20820693 (fixed)

Vendor states this is fixed in 9afe53f14a2aae8c4beb30e5ea51641a34f1a3d3 (fixed)

Vendor states this is fixed in a6d44f477000c6352de6b05e9e276e62083e5fbf (fixed)

Vendor states this is fixed in c8c4a2972f83c8b68ff03b43cecdb898939ff851 (fixed)

Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.6 (unaffected)

Vendor states this is fixed in 6.1.175 (unaffected)

Vendor states this is fixed in 6.12.91 (unaffected)

Vendor states this is fixed in 6.18.33 (unaffected)