CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle の Use-After-Free 非特権 LPE DRM コアの ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2 における Use-After-Free を介したローカル特権昇格。レンダーノード /dev/dri/renderD、主要なデスクトップディストリビューションでは systemd-logind によってアクティブセッションに許可される...

CVE-2026-53145: Time-of-check Time-of-use (TOCTOU) Race Condition

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix changehandle ioctl, attempt 4 airlied: just added some comments on how to reenable On-list because the cat is out of the bag and we're clearly not good enough to figure this out in private. The story thus far:...