CVE-2026-53109

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the powerpc architecture's page table fragment management. The system uses pt frag refcount to track page table fragments. When pte free defer() is called during madvise MADV COLLAPSE on a shmem range, it sets an active flag on the folio and reduces the reference count. A bad page state occurs during the do exit() path when a folio is freed while the active flag is still set. This happens if a process exits while holding a cached pte frag in mm->context and the pte frag destroy() function calls pagetable dtor() and pagetable free() without clearing the active flag. The vulnerability involves the pte frag destroy() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.