CVE Database›Document archive›CVE-2026-93217

CVE-2026-93217

kernel: mm/madvise: skip device-private PMDs in cold and pageout walks

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 24, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's memory management subsystem. A race condition can occur when an HMM-based Graphics Processing Unit (GPU) driver interacts with madvise(MADV_COLD) or MADV_PAGEOUT operations. This can lead to a kernel panic, effectively causing a Denial of Service (DoS) on the affected system.

Statement

This vulnerability is rated as having a Low security impact for Red Hat Enterprise Linux because exploitation requires a precise race condition occurring exclusively during page-reclaim advice operations on systems utilizing specialized heterogeneous memory management (HMM) device drivers. On typical deployments without such hardware and driver configurations, the vulnerable code paths cannot be exercised. Additionally, an attacker must have local access to execute system calls, and the impact is confined to a denial of service through an assertion failure without threatening system confidentiality or data integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition