CVE-2026-93181
kernel: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system instability or a denial of service, where the system becomes unresponsive to legitimate requests.
Statement
This vulnerability is rated as Low severity because triggering the issue requires CPU online and offline operations on Intel x86 platforms, which are restricted to privileged users with root access or administrative capabilities. In typical Red Hat Enterprise Linux environments, CPU hotplug events are uncommon during routine operations, and unprivileged users cannot manipulate processor availability. Consequently, the flaw presents minimal operational risk and cannot be exploited for unauthorized privilege escalation or remote code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-909 · Missing Initialization of Resource