CVE-2026-63910

A flaw was found in the Linux kernel's dma-buf (Direct Memory Access buffer) subsystem. A race condition in the dma_buf_fd() tracepoint can lead to a Use-After-Free (UAF) vulnerability. A local attacker could exploit this by closing a file descriptor (fd) prematurely, causing the dma_buf to be freed while the tracepoint still attempts to access it. This could result in a system crash or potentially lead to privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.