CVE-2026-72093

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the amdxdna gem dmabuf mmap() function. When vm insert pages() fails, the error path triggers vma->vm ops->close(vma), which leads to drm gem vm close() and subsequently drm gem object put(), releasing the GEM object reference. The process then incorrectly falls through to the put obj label, which calls drm gem object put() a second time on the same object. If the first call released the final reference, the object is freed, and the second call accesses that freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.