CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Local privilege escalation via a use-after-free in the DRM core ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2. Reachable by any user with access to a render node /dev/dri/renderD, granted to the active...

Linux Distros Unpatched Vulnerability : CVE-2026-53145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix changehandle ioctl, attempt 4 airlied: just added some comments on how t...

CVE-2026-53145: Time-of-check Time-of-use (TOCTOU) Race Condition

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix changehandle ioctl, attempt 4 airlied: just added some comments on how to reenable On-list because the cat is out of the bag and we're clearly not good enough to figure this out in private. The story thus far:...

CVE-2026-46215: Use After Free

In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in changehandle There was a potential race condition in changehandle. The ioctl briefly had a single object with two idr entries; a concurrent gemclose could delete the object and...