Race condition in Linux kernel - CVE-2026-93047

Vulnerability identifier: #VU150985

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-93047

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause data corruption.

The vulnerability exists due to improper synchronization in the V3D DRM driver job submission handling when submitting a job chain with a trailing cache-clean job. A local user can submit a job chain that accesses buffer objects without acquiring implicit dependencies to cause data corruption.

Exploitation requires another context to be writing the accessed buffer objects concurrently.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/7244dd0f12629484a1936dc5c5837670d8d9f80c
• https://git.kernel.org/stable/c/fa98563ab00dbe62fcedfef6bdd34ded7a860d9f

• Race condition in Linux kernel drm v3d driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more