Improper control of a resource through its lifetime in Linux kernel - CVE-2026-93181

Vulnerability identifier: #VU150810

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-93181

CWE-ID: CWE-664

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local privileged user to disrupt uncore event collection.

The vulnerability exists due to improper resource lifetime management in the Intel x86 uncore event handling code when CPUs transition online or offline. A local privileged user can trigger CPU online or offline events to disrupt uncore event collection.

On systems with one CPU per die, an uncore box can remain uninitialized.

Linux kernel
Debian Linux
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux (Debian package)

Install security update from vendor's repository.

linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17
linux (Debian package) - update to 6.12.115-2

• https://git.kernel.org/stable/c/174f0582e38abe03b88e15f04bfe58490f88cb19
• https://git.kernel.org/stable/c/64aa1bb4017d598828c6d8cd718f43daf2a83375

• Improper control of a resource through its lifetime in Linux kernel events intel
• Debian update for linux
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more