CVE-2026-53145

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) Graphics Execution Manager (GEM) subsystem. A race condition exists within the change_handle ioctl between gem_close and gem_change_handle operations. This could lead to incorrect handling of graphics memory, potentially resulting in system instability or unexpected behavior. The change_handle ioctl has been temporarily disabled to mitigate this issue.

This IMPORTANT impact flaw in the Linux kernel's Direct Rendering Manager (DRM) Graphics Execution Manager (GEM) subsystem affects the kernel and kernel-rt packages in Red Hat Enterprise Linux 7, 8, 9, and 10 and the kernel and kernel-ivos-qualcomm packages in Red Hat In-Vehicle OS 2, while the Red Hat Enterprise Linux 6 Extended Lifecycle Support stream remains under assessment. The flaw is a race condition in the change_handle ioctl, where a concurrent gem_close operation can interfere with the handle replacement performed by gem_change_handle, causing graphics buffer object handles and their references to be managed incorrectly. A local attacker with low privileges could exploit this flaw by racing these ioctl calls to trigger incorrect handling of graphics memory, potentially resulting in memory corruption, system instability, or a denial of service; successful exploitation requires precise timing and has high attack complexity. The upstream fix reworks the handle replacement logic and temporarily disables the change_handle ioctl until the race condition is fully resolved. Red Hat Product Security rates this flaw as IMPORTANT, with a CVSS 3.1 score of 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) that matches the upstream CVE.org severity. Remediation is delegated to the kernel maintenance team, and a fix is being pursued for the affected Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.