CVE-2026-98180

A flaw was found in the Linux kernel's Direct Rendering Manager (DRM) MSM driver. When ring buffer or virtual memory objects containing a GPU scheduler are freed, synchronization fences exported to user space continue to reference the deallocated scheduler memory. A local unprivileged attacker can exploit this flaw by querying fence timeline information, triggering a use-after-free condition that leads to a kernel crash and Denial of Service (DoS) or potential information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.