SB20260918186 - Race condition in Linux kernel drm v3d driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-93047)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause data corruption.

The vulnerability exists due to improper synchronization in the V3D DRM driver job submission handling when submitting a job chain with a trailing cache-clean job. A local user can submit a job chain that accesses buffer objects without acquiring implicit dependencies to cause data corruption.

Exploitation requires another context to be writing the accessed buffer objects concurrently.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/7244dd0f12629484a1936dc5c5837670d8d9f80c
• https://git.kernel.org/stable/c/fa98563ab00dbe62fcedfef6bdd34ded7a860d9f