Skip to main content
VulnerabilityPublished Updated

CVE-2026-93239: Linux kernel · arm64: mm: Fix the lockless page-table walk in show_pte()

Source GCVE Database

0
Compare
Authoritative record:CVE-2026-93239· Medium

Not known to be exploited · fixed in e1b06278a7e241da0cd3187871e67255f956d184 : update Linux kernel when convenient.

Data as of 30 Oct 2026, 18:02 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in e1b06278a7e241da0cd3187871e67255f956d184, b3535b6cb2c48f97b8c3378eb9ea12538425bf14, b28fe65a36b8209b6adcf2722c7ce974cf9ac8d1 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 1d18c47c735e8adfe531fc41fae31e98f86b68fe, < e1b06278a7e241da0cd3187871e67255f956d184
Fixed in
  • e1b06278a7e241da0cd3187871e67255f956d184
LinuxLinuxAffected
  • ≥ 1d18c47c735e8adfe531fc41fae31e98f86b68fe, < b3535b6cb2c48f97b8c3378eb9ea12538425bf14
Fixed in
  • b3535b6cb2c48f97b8c3378eb9ea12538425bf14
LinuxLinuxAffected
  • ≥ 1d18c47c735e8adfe531fc41fae31e98f86b68fe, < b28fe65a36b8209b6adcf2722c7ce974cf9ac8d1
Fixed in
  • b28fe65a36b8209b6adcf2722c7ce974cf9ac8d1
LinuxLinuxAffected
  • ≥ 1d18c47c735e8adfe531fc41fae31e98f86b68fe, < b8f06b73ad146d84a33c124563c93eeef4f5b674
Fixed in
  • b8f06b73ad146d84a33c124563c93eeef4f5b674
LinuxLinuxAffected
  • ≥ 1d18c47c735e8adfe531fc41fae31e98f86b68fe, < a77644d009dece1104b6fcc6e322b0e4503db0d6
Fixed in
  • a77644d009dece1104b6fcc6e322b0e4503db0d6
LinuxLinuxAffected
  • ≥ 1d18c47c735e8adfe531fc41fae31e98f86b68fe, < 68cbd70795dd8c06e7ccdc4eb0b74c5b180076c3
Fixed in
  • 68cbd70795dd8c06e7ccdc4eb0b74c5b180076c3

AI-suggested

A fix has been implemented in the Linux kernel to address this issue by modifying show_pte() to use lockless offset helpers with saved parent entries and disabling local interrupts during the page-table walk. Users should apply the official kernel updates containing this fix when available. There is no indication that additional mitigation steps are required beyond applying the patch.

Description

CVE-2026-93239 is a vulnerability in the Linux kernel's arm64 memory management subsystem involving a lockless page-table walk in the show_pte() function. The flaw allows a concurrent teardown to free a page table while it is being walked, potentially causing the function to dereference a released page or derive an invalid pointer. The issue is addressed by using lockless offset helpers with saved parent entries and disabling local interrupts during the walk to prevent concurrent frees. This fix reduces the risk of faults caused by accessing freed memory during page-table walks.

References

Community reviews

Loading reviews…