PT-2026-30160 · Linux · Linux Kernel

Published 2026-04-03 · Updated 2026-05-30 · CVE-2026-23466

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the DRM/XE subsystem related to GGTT MMIO access protection. Currently, GGTT MMIO access is protected by hotplug mechanisms, which function correctly during normal driver loading and unloading. However, if driver loading fails, this protection is inadequate because the necessary cleanup function is not executed. Furthermore, the system cannot guarantee that all buffers with GGTT mappings are destroyed before the GGTT MMIO region is removed, due to asynchronous freeing by worker threads. To resolve this, a flag protected by the GGTT lock has been introduced to guard GGTT MMIO access. This flag is cleared during teardown to disable MMIO access once the process begins.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-23466

Affected Products

Linux Kernel

References · 16

• https://git.kernel.org/stable/c/e2b424aadecb640f9e037b2891191cf8fd4c64cf · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23466 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23466 · Vendor Advisory
• https://git.kernel.org/stable/c/01f2557aa684e514005541e71a3d01f4cd45c170 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23466 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23466 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23466 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23466 · Vendor Advisory
• https://git.kernel.org/stable/c/1e9e2640d870d4837bcfdc220cb2c99ae5ee119f · Patch
• https://cve.org/CVERecord?id=CVE-2026-23466 · Security Note
• https://git.kernel.org/stable/c/76326dc06d8793c2c81c31cc0115dbc348de2f88 · Patch
• https://twitter.com/DFIR_Lab/status/2060548086322106824 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-23466 · Note
• https://twitter.com/CVEnew/status/2040111860805247255 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2040191883503190444 · Twitter Post