CVE-2026-63885
Received Received - Intake

Race Condition in Linux Kernel DRM GEM Handle Management

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change_handle and handle_delete drm_gem_change_handle_ioctl leaves the old handle live in the IDR during the window between spin_unlock(table_lock) and the final spin_lock(table_lock). A concurrent drm_gem_handle_delete on the old handle succeeds in this window, decrements handle_count to 0, and frees the GEM object while the new handle's IDR entry still references it. NULL the old handle's IDR entry before dropping table_lock so that any concurrent GEM_CLOSE on the old handle sees NULL and returns -EINVAL. Restore the old entry on the prime-bookkeeping error path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63885
EUVD
EUVD-2026-45770

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the Direct Rendering Manager (DRM) gem module. The issue occurs when changing a handle to a GEM object while another process deletes the old handle. The old handle remains temporarily active, allowing a concurrent deletion to free the GEM object while the new handle still references it, leading to a use-after-free scenario.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM (Direct Rendering Manager) subsystem and does not have network-based detection methods. To detect it, check if your system is running a vulnerable kernel version. Use commands like 'uname -a' to view the kernel version and compare it against patched versions.

Impact Analysis

This vulnerability could allow an attacker to cause a system crash, execute arbitrary code, or escalate privileges by exploiting the race condition. It primarily affects systems running vulnerable Linux kernel versions with DRM gem functionality enabled.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel memory management issue unrelated to data protection or privacy controls.

Mitigation Strategies

Update your Linux kernel to a version that includes the fix for CVE-2026-63885. This typically involves running your system's package manager to install the latest kernel updates, then rebooting to apply the changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63885. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart