CVE-2026-93121
Last modified
CVE-2026-93121 is a high-severity vulnerability rated 7/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths The error paths for endpoint-disabled (ESHUTDOWN) and request-allocation failure (ENOMEM) in ffs_dmabuf_transfer() jump to err_fence_put which calls dma_fence_put() on the fence. However, at that point the fence has only been kmalloc'd — dma_fence_init() has not been called yet, so the refcount and the fence ops are uninitialized.
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths The error paths for endpoint-disabled (ESHUTDOWN) and request-allocation failure (ENOMEM) in ffs_dmabuf_transfer() jump to err_fence_put which calls dma_fence_put() on the fence. However, at that point the fence has only been kmalloc'd — dma_fence_init() has not been called yet, so the refcount and the fence ops are uninitialized. Calling dma_fence_put() on such an object leads to undefined behavior. Use kfree() instead, since the fence is just a plain allocation at this stage, and rename the label to err_fence_free to reflect the actual cleanup action.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 7b07a2a7ca02a20124b552be96c5a56910795488, < be539138d9a187af3b884525a395db10797c64f1; >= 7b07a2a7ca02a20124b552be96c5a56910795488, < 5fd8baacc7dc477df9cac61b45491840247a9b1e; >= 7b07a2a7ca02a20124b552be96c5a56910795488, < 58952c83dfe6ea3294a74734d2d1018c1120779a; >= 7b07a2a7ca02a20124b552be96c5a56910795488, < 621707dc67c9846fd876d7579ec951d92aa033f1 |
| Linux | Linux | 6.9 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-93121?
How severe is CVE-2026-93121?
How do I fix CVE-2026-93121?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-93116In the Linux kernel, the following vulnerability has been re…7
- CVE-2026-93117In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93118In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93119In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9312A server-side request forgery (SSRF) vulnerability was ident…8.2
- CVE-2026-93120In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93122In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-93123In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93124In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93125In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-93126In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93127In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-93121?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST