CVE-2026-93047
kernel: drm/v3d: Associate BOs with every job that accesses them
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 20, 2026
Description
A flaw was found in the drm/v3d component of the Linux kernel. An implicit synchronization issue in the v3d_submit_lock_reservations() function could lead to a job reading a Buffer Object (BO) while another process is still writing to it. This could result in data corruption. A local attacker could potentially exploit this vulnerability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-821 · Incorrect Synchronization