CVE-2026-93066

A flaw was found in the Linux kernel. A race condition in the x86/mm/pat component, specifically between cpa_collapse_large_pages() and __change_page_attr(), can lead to a use-after-free vulnerability. A local attacker, by concurrently loading and unloading modules, could exploit this to write into freed memory. This memory corruption can cause system instability, leading to a denial of service.

This vulnerability is evaluated as having Moderate impact by Red Hat because successfully triggering the race condition requires local administrative privileges, specifically the capability to load and unload kernel modules concurrently. Standard Red Hat Enterprise Linux security boundaries prevent unprivileged accounts from initiating module operations, substantially mitigating exposure on default systems. Furthermore, the flaw is confined to x86 platforms during large-page collapses in module memory management and primarily results in a system crash or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.