CVE-2026-93217
Description
A flaw was found in the Linux kernel's memory management subsystem. A race condition can occur when an HMM-based Graphics Processing Unit (GPU) driver interacts with madvise(MADV_COLD) or MADV_PAGEOUT operations. This can lead to a kernel panic, effectively causing a Denial of Service (DoS) on the affected system.
Statement
This vulnerability is rated as having a Low security impact for Red Hat Enterprise Linux because exploitation requires a precise race condition occurring exclusively during page-reclaim advice operations on systems utilizing specialized heterogeneous memory management (HMM) device drivers. On typical deployments without such hardware and driver configurations, the vulnerable code paths cannot be exercised. Additionally, an attacker must have local access to execute system calls, and the impact is confined to a denial of service through an assertion failure without threatening system confidentiality or data integrity.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
