CVE-2026-93217
kernel: mm/madvise: skip device-private PMDs in cold and pageout walks
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's memory management subsystem. A race condition can occur when an HMM-based Graphics Processing Unit (GPU) driver interacts with madvise(MADV_COLD) or MADV_PAGEOUT operations. This can lead to a kernel panic, effectively causing a Denial of Service (DoS) on the affected system.
Statement
This vulnerability is rated as having a Low security impact for Red Hat Enterprise Linux because exploitation requires a precise race condition occurring exclusively during page-reclaim advice operations on systems utilizing specialized heterogeneous memory management (HMM) device drivers. On typical deployments without such hardware and driver configurations, the vulnerable code paths cannot be exercised. Additionally, an attacker must have local access to execute system calls, and the impact is confined to a denial of service through an assertion failure without threatening system confidentiality or data integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition