CVE-2026-93284

Received Received - Intake

Memory Corruption in Linux Kernel DRM Page Mapping

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drm_pagemap_migrate_unmap_pages() relies on the pages array to determine which pages require DMA unmapping. However, drm_pagemap_migration_unlock_put_pages() clears the array as part of its cleanup, leaving drm_pagemap_migrate_unmap_pages() with no valid page information if it is called afterward. Call drm_pagemap_migrate_unmap_pages() before drm_pagemap_migration_unlock_put_pages() so the pages array remains valid during DMA unmapping.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-93284

EUVD

EUVD-2026-86163

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of page migration in the drm/pagemap subsystem. The issue occurs when drm_pagemap_migrate_unmap_pages() is called after drm_pagemap_migration_unlock_put_pages(), which clears the pages array. This leaves the unmapping function without valid page information, potentially causing DMA unmapping failures.

Detection Guidance

This vulnerability is specific to the Linux kernel's DRM subsystem and requires kernel-level inspection. Detection involves checking kernel logs for related errors or verifying the kernel version against patched releases. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could lead to memory corruption or data corruption during DMA operations if page migration fails. It may cause system instability, crashes, or unexpected behavior in applications relying on GPU or display functionality.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a Linux kernel memory management issue rather than data protection or privacy controls. Compliance impacts would depend on how the affected system is used in a specific environment.

Mitigation Strategies

Apply the latest kernel patches from your Linux distribution that address this specific DRM/pagemap issue. Reboot the system after patching to ensure the updated kernel is active. Monitor kernel logs for any related errors post-update.

Hi! I’m here to help you understand CVE-2026-93284. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70