CVE-2026-93066
Description
A flaw was found in the Linux kernel. A race condition in the x86/mm/pat component, specifically between cpa_collapse_large_pages() and __change_page_attr(), can lead to a use-after-free vulnerability. A local attacker, by concurrently loading and unloading modules, could exploit this to write into freed memory. This memory corruption can cause system instability, leading to a denial of service.
Statement
This vulnerability is evaluated as having Moderate impact by Red Hat because successfully triggering the race condition requires local administrative privileges, specifically the capability to load and unload kernel modules concurrently. Standard Red Hat Enterprise Linux security boundaries prevent unprivileged accounts from initiating module operations, substantially mitigating exposure on default systems. Furthermore, the flaw is confined to x86 platforms during large-page collapses in module memory management and primarily results in a system crash or denial of service.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
