CVE-2026-58827

Summary

A use-after-free vulnerability in dma-buf.c arises from a race condition in multiple functions, allowing an unprivileged local attacker to potentially execute arbitrary code with kernel privileges.

Exploitability

Exploitation requires local access and is non-trivial due to the race condition, but no user interaction or additional privileges are needed.

Blast radius

Successful exploitation could lead to full system compromise, including privilege escalation to root, data theft, or system manipulation by a local attacker.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the kernel patch released in Linux kernel v6.12.4 or later, which resolves the race condition in dma-buf.c.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.