CVE-2026-53145

This IMPORTANT impact flaw in the Linux kernel's Direct Rendering Manager (DRM) Graphics Execution Manager (GEM) subsystem affects the kernel and kernel-rt packages in Red Hat Enterprise Linux 7, 8, 9, and 10 and the kernel and kernel-ivos-qualcomm packages in Red Hat In-Vehicle OS 2, while the Red Hat Enterprise Linux 6 Extended Lifecycle Support stream remains under assessment. The flaw is a race condition in the change_handle ioctl, where a concurrent gem_close operation can interfere with the handle replacement performed by gem_change_handle, causing graphics buffer object handles and their references to be managed incorrectly. A local attacker with low privileges could exploit this flaw by racing these ioctl calls to trigger incorrect handling of graphics memory, potentially resulting in memory corruption, system instability, or a denial of service; successful exploitation requires precise timing and has high attack complexity. The upstream fix reworks the handle replacement logic and temporarily disables the change_handle ioctl until the race condition is fully resolved. Red Hat Product Security rates this flaw as IMPORTANT, with a CVSS 3.1 score of 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) that matches the upstream CVE.org severity. Remediation is delegated to the kernel maintenance team, and a fix is being pursued for the affected Red Hat products.