CVE-2026-53207

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A recursive spinlock self-deadlock (AA deadlock) can occur on hugetlb lock when two concurrent madvise(MADV HWPOISON) calls are made on the same hugetlb page while racing with a concurrent unmap. This happens because the out: path in the get huge page for hwpoison() function calls folio put() to drop the GUP reference while the hugetlb lock is still held by the get huge page for hwpoison() wrapper. If a concurrent unmap has already released the page table mapping reference, folio put() reduces the folio refcount to zero, triggering free huge folio(), which then attempts to re-acquire the non-recursive hugetlb lock, resulting in a deadlock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.