CVE-2026-53377
Received Received - Intake

GPU Hang Recovery Bypass in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, recover worker wouldn't trigger recovery and would instead rely on the gpu going to sleep and then resuming when more work is submitted. Recover_worker will first increment the fence of the hung ring so, if there's only one job submitted to a ring and that causes an hang, it will early out. There's no guarantee that the gpu will suspend and resume before more work is submitted and if the gpu is in a hung state it will stay in that state and probably trigger a timeout again. Just stop checking and always recover the gpu. Patchwork: https://patchwork.freedesktop.org/patch/704066/

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-53377
EUVD
EUVD-2026-45450

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freedesktop linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel relates to the GPU recovery mechanism in the drm/msm driver. Previously, the system relied on the GPU going to sleep and resuming to recover from hangs. However, if the GPU was hung and no new work was submitted, it would remain in a hung state, potentially causing repeated timeouts.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/msm GPU driver and may not have direct network detection methods. Monitor kernel logs for GPU-related errors or hangs using commands like 'dmesg | grep -i msm' or 'journalctl -k | grep -i msm'. Check for GPU recovery events or timeouts.

Impact Analysis

This vulnerability could lead to GPU hangs persisting indefinitely if no new work is submitted, causing system instability or crashes. Users might experience graphical glitches, application freezes, or system unresponsiveness.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel GPU driver issue that could lead to system instability or hangs, but there is no evidence it impacts data protection or privacy requirements.

Mitigation Strategies

Apply the kernel patch referenced in the CVE details. Update your Linux kernel to a version that includes the fix. If immediate patching is not possible, monitor GPU stability and consider disabling GPU-intensive tasks until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53377. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart