CVE-2026-98243
kernel: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 6, 2026
Updated · October 11, 2026
Description
A flaw was found in the Linux kernel's dma-buf subsystem. When querying driver or timeline names on synchronization fences, the kernel fails to properly verify the fence signaling state before accessing operational handlers. This flaw can lead to a use-after-free condition where previously released memory is accessed. A local attacker could exploit this vulnerability to cause a denial of service (DoS) by crashing the system or potentially escalate privileges.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference