CVE Database›Document archive›CVE-2026-93181

CVE-2026-93181

kernel: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system instability or a denial of service, where the system becomes unresponsive to legitimate requests.

Statement

This vulnerability is rated as Low severity because triggering the issue requires CPU online and offline operations on Intel x86 platforms, which are restricted to privileged users with root access or administrative capabilities. In typical Red Hat Enterprise Linux environments, CPU hotplug events are uncommon during routine operations, and unprivileged users cannot manipulate processor availability. Consequently, the flaw presents minimal operational risk and cannot be exploited for unauthorized privilege escalation or remote code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-909 · Missing Initialization of Resource