Memory Management Vulnerability in Linux Kernel Affecting Embedded GPU Schedulers
CVE-2026-98180
Key Information:
Badges
What is CVE-2026-98180?
A vulnerability in the Linux kernel affects the handling of GPU scheduler memory, leading to potential access to freed memory regions. Specifically, the issue arises from the improper freeing of scheduler-containing ring and VM objects. When the associated structures are deallocated using plain kfree() instead of the safer kfree_rcu(), a user-space access through SYNC_IOC_FILE_INFO can trigger a use-after-free condition. This can compromise system stability and expose sensitive data. Proper memory management practices involving RCU grace periods are critical to mitigate such risks.
Affected Version(s)
Linux 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19
Linux 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < 713abac5c04ccbae67f9ac68c3921845535388e7
Linux 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < 01c8d1f385f788f1bbbbb7687c4386d614281218
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.