CVE-2026-52966

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) subsystem. A logical error in the 'change handle' logic, specifically related to the replacement of IDR (ID allocator) pointers, could lead to a kernel warning or system panic. This issue could allow a local attacker to trigger a system crash, resulting in a denial of service.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation is restricted to authenticated local users and is limited to causing a denial of service. The issue stems from improper ID allocator pointer tracking within the Direct Rendering Manager (DRM) during handle manipulation operations. Although local users interacting with graphics device nodes can trigger a kernel crash, the defect cannot be triggered remotely and does not enable privilege escalation or confidentiality compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.