Race condition in Linux kernel - CVE-2026-93170
Published: September 18, 2026
Vulnerability identifier: #VU150832
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-93170
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause descriptor corruption or missed DMA completions.
The vulnerability exists due to a race condition in the Xilinx AXIDMA and MCDMA interrupt handlers when handling descriptor-completion interrupts. A local user can queue multiple active descriptors before a completion interrupt occurs to cause descriptor corruption or missed DMA completions.
Exploitation requires descriptors to remain in the active list after completed descriptors are moved to the done list.
Affected software
Linux kernel
How to mitigate CVE-2026-93170
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/0b6d055edb55ecadadf54e930c2b4fab76fa9a5a
- https://git.kernel.org/stable/c/425630e9eea1f9f8912b8c6abf01e0dab1e27917
- https://git.kernel.org/stable/c/5459e02707b27a964ae72e028d3ff72a3b687c4a
- https://git.kernel.org/stable/c/7f4b989d7d87381927b98d64492f8dcf979f57ab
- https://git.kernel.org/stable/c/c27d16fd2358b2fc3e1ffaca03afd11dc28630ea
- https://git.kernel.org/stable/c/c3e943490ced0b9ad475844eda7661f6a9bcfb4a
- https://git.kernel.org/stable/c/ec927657524be4438447944a58173c7baf7f2384
- https://git.kernel.org/stable/c/fdaf297ab275c6efecac5e87669c31bc89b74297