CVE-2026-93180: Linux kernel · drm/panthor: Fix NPD issue on partial unmap of an evicted BO
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to 23d41b2e68765ad7095b1424f70c21c281f8a600 or 5fb40edc7439b99d001988da63485ca51dbd3550 when convenient.
Data as of 26 Oct 2026, 16:39 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 12% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 23d41b2e68765ad7095b1424f70c21c281f8a600, 5fb40edc7439b99d001988da63485ca51dbd3550
Exploitation evidence
Disclosed: evidence found.
CVE published 17 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 23d41b2e68765ad7095b1424f70c21c281f8a600 or 5fb40edc7439b99d001988da63485ca51dbd3550.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix for this vulnerability is available in the Linux kernel commits 23d41b2e68765ad7095b1424f70c21c281f8a600 and 5fb40edc7439b99d001988da63485ca51dbd3550. Users and administrators should update their Linux kernel to a version including these commits to remediate the issue. No additional mitigation steps are indicated.
Description
A NULL pointer dereference vulnerability in the Linux kernel's drm/panthor driver was fixed. The flaw occurred during partial unmap operations of an evicted buffer object (BO), where a pointer was dereferenced after being set to NULL upon eviction. This could lead to a kernel oops and system instability when GPU memory mappings were split and partially unmapped. The issue has been addressed by correcting the logic to skip handling partial unmaps for evicted BOs.