{"id":"CVE-2026-93809","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: flush pending RCU callbacks on module unload\n\nCall rcu_barrier() in module exit to wait for outstanding call_rcu() callbacks\nbefore freeing module text, pre…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: flush pending RCU callbacks on module unload\n\nCall rcu_barrier() in module exit to wait for outstanding call_rcu() callbacks\nbefore freeing module text, pre…","severity":"medium","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5063ae84c45299a100bf1d6ed11945f688063649","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 27d43ad57759c73b8fad5b2bad62a0616e116bbc","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 67a654b41cfa73c3b83402c4a01b2689cad5b9bc","Linux < 6.12.111","Linux < 6.18.53","Linux (all versions)"],"published":"2026-09-24","updated":"2026-09-25","sourceUpdated":"2026-09-25T13:17:21.763","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93809","references":[{"url":"https://git.kernel.org/stable/c/67a654b41cfa73c3b83402c4a01b2689cad5b9bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/27d43ad57759c73b8fad5b2bad62a0616e116bbc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5063ae84c45299a100bf1d6ed11945f688063649","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93809.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-93809"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540377"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93809"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93809"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93809.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ingestedAt":"2026-09-24T16:47:15.895Z","epss":0.00166,"epssPercentile":0.05828,"cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-825"],"slug":"CVE-2026-93809","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: flush pending RCU callbacks on module unload\n\nCall rcu_barrier() in module exit to wait for outstanding call_rcu() callbacks\nbefore freeing module text, preventing late callback execution in freed memory.\n\nBUG: unable to handle page fault for address: ffffffffc1d59c40\nPGD 6a12067 P4D 6a12067 PUD 6a14067 PMD 13698b067 PTE 0\nOops: 0010 [#1] SMP NOPTI\nRIP: 0010:0xffffffffc1d59c40\nCode: Unable to access opcode bytes at RIP 0xffffffffc1d59c16.\nRSP: 0018:ffffc900198c0f28 EFLAGS: 00010286\nRAX: ffffffffc1d59c40 RBX: ffff897c7d6b61c0 RCX: ffff88826aff4590\nRDX: ffff8884d8b35490 RSI: ffffc900198c0f30 RDI: ffff88812af67290\nRBP: 000000000000000a (DONE segment entries) R08: 0000000000000000 R09: 0000000000000100\nR10: 0000000000000000 R11: ffffffff82a06100 R12: ffff88811a4e3700\nR13: 0000000000000000 R14: ffff897c7d6b6270 R15: 0000000000000000\nFS:  0000000000000000(0000) GS:ffff897c7d680000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffffffc1d59c16 CR3: 00000104a980a001 CR4: 0000000002770ee0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n <IRQ>\n ? rcu_do_batch+0x163/0x450\n ? rcu_core+0x177/0x1c0\n ? __do_softirq+0xc1/0x280\n ? asm_call_irq_on_stack+0xf/0x20\n </IRQ>\n ? do_softirq_own_stack+0x37/0x50\n ? irq_exit_rcu+0xc4/0x100\n ? sysvec_apic_timer_interrupt+0x36/0x80\n ? asm_sysvec_apic_timer_interrupt+0x12/0x20\n ? cpuidle_enter_state+0xd4/0x360\n ? cpuidle_enter+0x29/0x40\n ? cpuidle_idle_call+0x108/0x1a0\n ? do_idle+0x77/0xf0\n ? cpu_startup_entry+0x19/0x20\n ? secondary_startup_64_no_verify+0xbf/0xcb\n\n(cherry picked from commit feaa5039f6c12acc9aa934c2d45dcd251a12c69f)\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 6 · updated 2026-10-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93809.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224290,"id":"CVE-2026-93809","ts":1792325075419,"field":"cvss","old":null,"new":"5.5"},{"seq":224289,"id":"CVE-2026-93809","ts":1792325075419,"field":"severity","old":"none","new":"medium"}]}