CVE-2026-97533

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the x86 memory management page attribute table (PAT) implementation. The problem occurs during attribute changes when a lockless page table walker retrieves a Page Table Entry (PTE) that is subsequently written to via the set pte atomic() function. A concurrent CPA collapse can free the retrieved PTE before the write operation completes, leading to a use-after-free condition. This race condition is specifically relevant within the module mapping space where the CPA COLLAPSE flag is set by set memory rox(). The issue involves the following function call sequence: change page attr set clr() -> change page attr set clr() -> change page attr() -> lookup address cpa() -> lookup address in pgd attr().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.