CVE-2026-90303

CVE-2026-90303 affects the Linux kernel on ARM architecture. When CONFIG_DEBUG_USER=y and the kernel command-line option user_debug=31 are active, a user fault can trigger show_pte() without holding any lock. If another thread in the same process concurrently calls munmap() , page table pages may...

CVE-2026-90303: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ARM: 9485/1: mm: acquire mmap write lock around showpte for user faults When CONFIGDEBUGUSER=y, and cmdline "userdebug=31" is set, a user fault may trigger showpte without any lock. If another thread in the same process...