CVE-2026-93216

A flaw was found in the Linux kernel. A Time-of-check to time-of-use (TOCTOU) vulnerability exists in the print_page_owner_memcg() function, where page->memcg_data is read multiple times without proper locking. If a memory page is concurrently freed and reallocated between these reads, it can trigger internal assertions, leading to a kernel crash. This can result in a Denial of Service (DoS) for the affected system.

This vulnerability is rated as having a Low severity impact because exploiting the race condition requires local access and relies on page-owner memory tracking features that are inactive by default in Red Hat Enterprise Linux. Furthermore, the kernel crash specifically stems from assertion checks that are compiled out in production kernels and only active when debug flags are enabled. As a result, standard enterprise environments running default configurations are not exposed to denial-of-service crashes from this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.