CVE-2026-64590

8.4

Linux · Kernel

A redundant CPU sync in the Linux kernel dma-buf/udmabuf component triggers a spurious cacheline EEXIST warning when debugging is enabled.

Executive summary

A high-severity flaw in the Linux kernel's dma-buf/udmabuf component can cause system instability when specific debugging configurations are active.

Vulnerability

The issue involves a redundant CPU synchronization process within the udmabuf driver. When CONFIG_DMA_API_DEBUG_SG is enabled, importing a buffer into a DRM driver, such as amdgpu, triggers a spurious cacheline EEXIST warning that can impact system performance or stability.

Business impact

With a CVSS score of 8.4, this vulnerability poses a risk of denial of service or unexpected system behavior. In environments relying on GPU acceleration or complex media playback, this instability could result in critical service interruptions or system crashes, impacting productivity and availability.

Remediation

Immediate Action: Update the Linux kernel to version 6.6.148, 6.12.96, 6.18.39, 7.1.4, or later.

Proactive Monitoring: Monitor kernel logs for EEXIST warnings or related dma-buf synchronization errors, especially in systems utilizing high-performance graphics drivers.

Compensating Controls: If immediate patching is not possible, disable the CONFIG_DMA_API_DEBUG_SG kernel configuration option to suppress the trigger for this specific warning.

Exploitation status

Public Exploit Available: Unknown.

Analyst recommendation

While this issue is triggered by specific debugging configurations, the potential for kernel-level instability necessitates a proactive update cycle. Administrators should deploy the provided kernel fixes to ensure system reliability and mitigate the risk of avoidable service disruptions.

More Linux CVEs