CVE-2026-93260

Received Received - Intake

Use-After-Free in Linux Kernel PowerPC XIVE Subsystem

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xive_init_ipis() fails (e.g. irq_domain_alloc_irqs() fails), the error path frees the global xive_ipis array. However, xive_smp_probe() previously ignored this failure and proceeded to call xive_setup_cpu_ipi(), which dereferences the already-freed xive_ipis pointer -- a use-after-free. Now that xive_smp_probe() returns int (previous patch), propagate the error from xive_init_ipis() and xive_setup_cpu_ipi() through xive_smp_probe(). Check the return value in both pnv_smp_probe() and pSeries_smp_probe() so that IPI setup is aborted cleanly on failure, avoiding the use-after-free.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-09-25

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-93260

EUVD

EUVD-2026-86132

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's powerpc/xive subsystem. When xive_init_ipis() fails, it frees the xive_ipis array but xive_smp_probe() continues execution and dereferences the freed pointer, leading to memory corruption.

Detection Guidance

This vulnerability is specific to the Linux kernel's powerpc/xive subsystem and requires kernel-level inspection. Detection involves checking kernel logs for IPI initialization failures or use-after-free errors related to xive_ipis. Commands like dmesg | grep -i xive or journalctl -k | grep -i xive may reveal relevant errors. Ensure your kernel version is checked against patched versions.

Impact Analysis

This could cause system crashes, data corruption, or privilege escalation if exploited. Systems using affected powerpc/xive configurations may become unstable or vulnerable to further attacks.

Compliance Impact

This vulnerability is a use-after-free issue in the Linux kernel's powerpc/xive subsystem, which could lead to memory corruption or crashes. It does not directly affect compliance with GDPR, HIPAA, or other standards as it is a low-level system vulnerability rather than a data protection or privacy issue.

Mitigation Strategies

Apply the latest kernel patches from your Linux distribution to resolve the issue. If immediate patching is not possible, consider disabling the affected powerpc/xive subsystem if not critical. Monitor kernel logs for IPI-related errors as a sign of exploitation or misconfiguration.

Hi! I’m here to help you understand CVE-2026-93260. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70