CVE-2026-72093
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() When vm_insert_pages() fails, the error path calls vma->vm_ops->close(vma) which internally calls drm_gem_vm_close() → drm_gem_object_put(), releasing the GEM object reference acquired at the start of the function. However, the close_vma label then falls through to put_obj, which calls drm_gem_object_put() a second time on the same object. If the first put releases the last reference, the object is freed and the second put accesses freed memory, causing a use-after-free. Fix by returning directly from close_vma instead of falling through to put_obj, since the close handler already performs all necessary cleanup including the object put.
Affected versions
Linux kernel versions
6.16
and later are affected. Fixed in
6.18.40,
7.1.5,
7.2-rc3
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-72093?
CVE-2026-72093 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.16 onward and has been patched in 6.18.40, 7.1.5 and 7.2-rc3. CVE-2026-72093 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-72093?
Yes. CVE-2026-72093 has been patched. Fixed versions include 6.18.40, 7.1.5 and 7.2-rc3. If you are running Linux kernel 6.16 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-72093 actively exploited?
No. CVE-2026-72093 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.