um: Fix potential race condition in TLB sync

{
  "id": "7cc27772685b23710f0713413f98a513fba55575aa91beee710724138f6ad633",
  "url": "https://osv.dev/vulnerability/CVE-2026-53020",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "um: Fix potential race condition in TLB sync",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: um: Fix potential race condition in TLB sync During the TLB sync, we need to traverse and modify the page table, so we should hold the page table lock. Since full SMP support for threads within the same process is still missing, let's disable the split page table lock for simplicity.",
    "evidence": "osv:CVE-2026-53020",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "7.0.10",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-53020",
      "aliases": [
        "CVE-2026-53020"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "1e4ee5135d814fe4785890790cec81c3132888fb"
                },
                {
                  "fixed": "f21c343ec7419377bff89ab11146c03ae117036f"
                },
                {
                  "fixed": "102331b66bcaf1f41f50b9c4cd5c36e46bafa9f3"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53020.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.0.10"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53020.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:23.183242133Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/102331b66bcaf1f41f50b9c4cd5c36e46bafa9f3",
        "https://git.kernel.org/stable/c/f21c343ec7419377bff89ab11146c03ae117036f",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53020.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53020",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53020.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-53020",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 489414,
  "published_at": "2026-06-24T16:29:29.796+00:00"
}