Memory Management Vulnerability in Linux Kernel Affecting Embedded GPU Schedulers
CVE-2026-98180
Key Information:
Badges
What is CVE-2026-98180?
A vulnerability in the Linux kernel affects the handling of GPU scheduler memory, leading to potential access to freed memory regions. Specifically, the issue arises from the improper freeing of scheduler-containing ring and VM objects. When the associated structures are deallocated using plain kfree() instead of the safer kfree_rcu(), a user-space access through SYNC_IOC_FILE_INFO can trigger a use-after-free condition. This can compromise system stability and expose sensitive data. Proper memory management practices involving RCU grace periods are critical to mitigate such risks.
Affected Version(s)
Linux 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < 0ba7c696eea3af41ac4712197566a7b94eedc637
Linux 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19
Linux 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < 713abac5c04ccbae67f9ac68c3921845535388e7
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.