CVE-2026-53054
kernel: drm/msm: Fix VM_BIND UNMAP locking
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) subsystem, specifically within the Qualcomm Adreno GPU (MSM) driver. An incorrect argument in the VM_BIND UNMAP locking mechanism meant that certain objects involved in unmapping operations were not consistently locked. This could potentially lead to unexpected system behavior or instability, particularly with non-shared buffer objects, impacting system reliability.
Statement
This vulnerability is rated as Moderate because exploitation requires local access with privileges to interact with the DRM subsystem and depends on the presence of Qualcomm Adreno GPU hardware, significantly limiting the blast radius in enterprise environments. Typical Red Hat Enterprise Linux server and cloud deployments do not utilize this specialized mobile SoC graphics hardware. Furthermore, Red Hat Enterprise Linux kernels do not include the vulnerable code introduced in upstream kernel releases, meaning supported enterprise products are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-413 · Improper Resource Locking