CVE-2026-93131

A flaw was found in the Linux kernel's dell-privacy driver. A race condition occurs when the priv->features_present data structure is accessed without holding the necessary list mutex. This allows the priv object to be freed prematurely, which could lead to system instability or a denial of service (DoS).

This vulnerability is rated as Moderate impact because exploitation requires local access on specific Dell hardware supporting privacy controls, limiting the blast radius to a localized denial of service. Under typical enterprise deployments, this driver is not engaged on general server hardware or cloud environments. Consequently, an attacker can at most trigger an unexpected system crash without compromising confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.