Race Condition Vulnerability in Linux Kernel Affecting Multiple Products

CVE-2026-46215

What is CVE-2026-46215?

A race condition has been identified in the Linux kernel related to the handling of device resources, specifically within the Direct Rendering Manager (DRM). This vulnerability arises during the prime swap operation where a single object can spawn two ID references. A concurrent operation, such as gem_close, could potentially delete one handle while leaving another dangling. This mishap could lead to a use-after-free scenario where the invalid handle is dereferenced, resulting in unpredictable behavior. To mitigate this issue, the kernel ensures proper reference management by setting the old handle to NULL before reuse, thereby preventing access to stale data. Additionally, related functions have been updated to include necessary safeguards against similar race conditions, highlighting the ongoing commitment to maintaining kernel integrity.

References