CVE-2026-93218

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the memory management subsystem where madvise free huge pmd() fails to properly handle device-private Page Middle Directories (PMDs). A race condition can occur when an HMM-based GPU driver uses migrate vma pages() to flip a PMD to a device-private entry between the time madvise free pte range() performs an unlocked check of pmd trans huge() and the time madvise free huge pmd() acquires the pmd trans huge lock(). Because pmd is huge() returns true for device-private PMDs, the process may enter a non-present branch and attempt to call pmd folio(), potentially leading to a system panic. A PMD softleaf is a page table entry that does not point to a page of memory but instead contains metadata used by the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.