Strix
74.2K

CVE-2026-93058

UnknownEPSS 0.21%

Last modified

CVE-2026-93058 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msm_ringbuffer_new() destroys a partially initialized ring through msm_ringbuffer_destroy() when an allocation or scheduler setup step fails. If drm_sched_init() fails before it finishes initializing the scheduler, the failure path still calls drm_sched_fini(). That teardown path assumes the scheduler work items, lists, and workqueue state were initialized. Track successful scheduler initialization and call drm_sched_fini() only after drm_sched_init() returned 0. This issue was found by a static analysis checker and confirmed by manual source review. Patchwork: https://patchwork.freedesktop.org/patch/738905/. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msm_ringbuffer_new() destroys a partially initialized ring through msm_ringbuffer_destroy() when an allocation or scheduler setup step fails. If drm_sched_init() fails before it finishes initializing the scheduler, the failure path still calls drm_sched_fini(). That teardown path assumes the scheduler work items, lists, and workqueue state were initialized. Track successful scheduler initialization and call drm_sched_fini() only after drm_sched_init() returned 0. This issue was found by a static analysis checker and confirmed by manual source review. Patchwork: https://patchwork.freedesktop.org/patch/738905/

Metrics

EPSS Probability
0.21%

11.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19, < 20ea0ae8e90702acca83467207db4c9bd8c8bd03; >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19, < bd2a5a876904eaf688a093cd73986abc3571f26b; >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19, < aafc9258efeec98fcb7e3998356b4b25bf1ad159; >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19, < d43e1bbfd43458b9242806eec77ea3b032134baf; >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19, < 09b360eb6ce345996a30fad8c86e9df80f41cd7e; >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19, < e2332abed2a4d3caa59052095dc16e4ce44791ea
LinuxLinux5.15

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93058?
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after successful init msm_ringbuffer_new() destroys a partially initialized ring through msm_ringbuffer_destroy() when an allocation or scheduler setup step fails. If drm_sched_init() fails before it finishes initializing the scheduler, the failure path still calls drm_sched_fini(). That teardown path assumes the scheduler work items, lists, and workqueue state were initialized. Track successful scheduler initialization and call drm_sched_fini() only after drm_sched_init() returned 0. This issue was found by a static analysis checker and confirmed by manual source review. Patchwork: https://patchwork.freedesktop.org/patch/738905/
How severe is CVE-2026-93058?
Severity scoring for CVE-2026-93058 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-93058?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93058?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST