CVE-2026-100077

Undergoing Analysis Undergoing Analysis - In Progress

Kernel GPU Recovery Race Condition Leading to GPU Pagefaults

Publication date: 2026-09-25

Last updated on: 2026-10-02

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit During recovery, it is not safe to retire the hung submit before we recover the GPU. Retiring the submit triggers BO free and that can result in GPU pagefaults since the GPU may be actively accessing those BOs. To fix this, retire the submits after gpu recovery is complete in recover_worker(). Patchwork: https://patchwork.freedesktop.org/patch/730655/

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-02

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-100077

EUVD

EUVD-2026-87057

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 7.2.6 (exc)
linux	linux_kernel	From 4.2 (inc) to 6.18.52 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling during GPU recovery. When the GPU is recovering from a hung state, retiring a submit operation too early can trigger buffer object (BO) freeing while the GPU is still accessing them. This leads to potential GPU page faults.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/msm driver and relates to GPU recovery handling. Detection requires checking for GPU-related errors or hangs in kernel logs or using GPU-specific tools. Commands like dmesg | grep msm, journalctl -k | grep -i gpu, or monitoring for GPU page faults may help identify issues.

Impact Analysis

This vulnerability may cause system instability, crashes, or data corruption if the GPU encounters page faults during recovery. Users could experience graphical glitches, application failures, or system freezes, particularly in systems using the affected Linux kernel components.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a graphics driver issue in the Linux kernel. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Apply the Linux kernel patch from the provided Patchwork link to fix the GPU recovery issue. Ensure your system is updated to a patched kernel version to prevent GPU pagefaults during recovery.

Hi! I’m here to help you understand CVE-2026-100077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70