Race condition in Linux kernel - CVE-2026-93047
Published: September 18, 2026
Vulnerability identifier: #VU150985
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-93047
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause data corruption.
The vulnerability exists due to improper synchronization in the V3D DRM driver job submission handling when submitting a job chain with a trailing cache-clean job. A local user can submit a job chain that accesses buffer objects without acquiring implicit dependencies to cause data corruption.
Exploitation requires another context to be writing the accessed buffer objects concurrently.
Affected software
Linux kernel
How to mitigate CVE-2026-93047
Install security update from vendor's repository.