CVE-2026-93076dax/fsdev: clear vmemmap_shift when binding static pgmap
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dax/fsdev: clear vmemmap_shift when binding static pgmap Clear pgmap->vmemmap_shift for static DAX devices. When rebinding a static device from device_dax (which may set vmemmap_shift based on alignment) to fsdev_dax, the stale vmemmap_shift persists on the shared pgmap. Explicitly zero it before devm_memremap_pages() so the vmemmap is built for order-0 folios as fsdev requires.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d5406bd458b0ac10b1301a4d5801d85c8f648637 before d298a0513aaf7d48f2a9f4a90041de910750cfcf; from d5406bd458b0ac10b1301a4d5801d85c8f648637 before e0239229931faf9ca3367e3befcf16f77b2cd45b | CNA record |
References
- https://git.kernel.org/stable/c/d298a0513aaf7d48f2a9f4a90041de910750cfcf
- https://git.kernel.org/stable/c/e0239229931faf9ca3367e3befcf16f77b2cd45b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.