{"id":"CVE-2026-93239","aliases":[],"cve":{"records":[{"id":"CVE-2026-93239","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-17T16:02:15.095Z","published":"2026-09-24T15:34:27.219Z","modified":"2026-10-30T12:36:29.121Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:36:29.121Z"}],"references":[{"url":"https://git.kernel.org/stable/c/b8f06b73ad146d84a33c124563c93eeef4f5b674","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/b3535b6cb2c48f97b8c3378eb9ea12538425bf14","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/e1b06278a7e241da0cd3187871e67255f956d184","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/08d931a0a850ad16a64f2cd23a19f40795cdbdf7","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/b28fe65a36b8209b6adcf2722c7ce974cf9ac8d1","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/68cbd70795dd8c06e7ccdc4eb0b74c5b180076c3","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/0f05d95b99164a9ccc4cf4a4920e0ff0228138ad","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/a77644d009dece1104b6fcc6e322b0e4503db0d6","tags":[],"source":"Linux"}],"weaknesses":[],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"5.10.273"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"5.15.224"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"6.6.157"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"6.12.110"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"6.18.51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"7.2.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"7.3"}]}]}]}],"prioritization":[]},"title":"arm64: mm: Fix the lockless page-table walk in show_pte()","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64: mm: Fix the lockless page-table walk in show_pte()\n\nshow_pte() walks page tables locklessly and can run with interrupts\nenabled. A concurrent teardown can free a table page while it is being\nwalked. It can also clear a parent entry after show_pte() checked it; the\nregular pXd_offset() helpers then reread the cleared entry and can derive a\nbogus lower-level pointer and fault again.\n\nUse the lockless offset helpers with the saved parent entries, as\ngup_fast() does, and pass the saved PMD to pte_offset_map().\n\nFor task page tables, arm64 selects MMU_GATHER_RCU_TABLE_FREE. Disable\nlocal interrupts around the walk to hold off RCU-deferred table frees and\nblock the tlb_remove_table_sync_one() IPI until the walk is finished.\n\nPlace the IRQ guard after the header print. This does not make the output a\nconsistent snapshot, but prevents the task page-table walk from\ndereferencing a released table page or deriving a pointer from a different\nparent value.","score":null,"severity":"unknown","published":"2026-09-24T15:34:27.219Z","modified":"2026-10-30T12:36:29.121Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"b8f06b73ad146d84a33c124563c93eeef4f5b674","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"b3535b6cb2c48f97b8c3378eb9ea12538425bf14","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"e1b06278a7e241da0cd3187871e67255f956d184","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"08d931a0a850ad16a64f2cd23a19f40795cdbdf7","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"b28fe65a36b8209b6adcf2722c7ce974cf9ac8d1","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"68cbd70795dd8c06e7ccdc4eb0b74c5b180076c3","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"0f05d95b99164a9ccc4cf4a4920e0ff0228138ad","versionType":"git"},{"version":"1d18c47c735e8adfe531fc41fae31e98f86b68fe","status":"affected","lessThan":"a77644d009dece1104b6fcc6e322b0e4503db0d6","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-93239"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"3.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.7","versionType":"semver"},{"version":"5.10.273","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.224","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.157","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.110","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.51","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.5","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-93239"}],"remediation":[],"references":["https://git.kernel.org/stable/c/b8f06b73ad146d84a33c124563c93eeef4f5b674","https://git.kernel.org/stable/c/b3535b6cb2c48f97b8c3378eb9ea12538425bf14","https://git.kernel.org/stable/c/e1b06278a7e241da0cd3187871e67255f956d184","https://git.kernel.org/stable/c/08d931a0a850ad16a64f2cd23a19f40795cdbdf7","https://git.kernel.org/stable/c/b28fe65a36b8209b6adcf2722c7ce974cf9ac8d1","https://git.kernel.org/stable/c/68cbd70795dd8c06e7ccdc4eb0b74c5b180076c3","https://git.kernel.org/stable/c/0f05d95b99164a9ccc4cf4a4920e0ff0228138ad","https://git.kernel.org/stable/c/a77644d009dece1104b6fcc6e322b0e4503db0d6"],"sources":[{"name":"CVE","id":"CVE-2026-93239","modified":"2026-10-30T12:36:29.121Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-93239"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T13:55:44.384Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T22:15:32.964Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}