CVE-2026-63885

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) Graphics Execution Manager (GEM) component. A race condition, a situation where multiple operations occur in an unpredictable order, exists between the change_handle and handle_delete operations. This can allow a local attacker to free a Graphics Execution Manager (GEM) object while it is still being referenced by another handle. This could lead to a use-after-free vulnerability, potentially resulting in a denial of service or other impacts.

This vulnerability is rated as Moderate impact because exploitation requires local authenticated access with permissions to interact with Direct Rendering Manager device nodes and successfully win a race condition during handle manipulation. In typical Red Hat Enterprise Linux environments, access to DRM render and control nodes is restricted to logged-in console users or specific privileged groups, reducing unauthenticated exposure. Although a successful exploit could trigger memory corruption leading to a kernel crash or privilege escalation, the required timing precision and local access constraints significantly reduce the overall attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.