CVE-2026-93131platform/x86: dell-privacy: Fix race condition
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-privacy: Fix race condition Accessing priv->features_present needs to happen with the list mutex being held, otherwise priv can be freed at any moment.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 before 239ae86b7c97341f49d2ba32037ee3ddbaf0f1ab; 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 builds before 2d2108685a491b369f95774d0a7579d6e5287215; from 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 before a22beeb90475b5f71a477564eecf764b24f47277; from 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 before f3c4532f6dac8fb5504d342e2a15e6353e5eb56e; from 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 before 9f860050c3d17ff8499d3998f7534d306c3da50a; from 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 before ef59ff891adf9bd696917f71f841fdb23c245790; from 8af9fa37b8a3637832cbf8fdd9bd828bd5f0de66 before ca9338dbc64759b30741b12017c050b33c94dfa2 | CNA record |
References
- https://git.kernel.org/stable/c/239ae86b7c97341f49d2ba32037ee3ddbaf0f1ab
- https://git.kernel.org/stable/c/2d2108685a491b369f95774d0a7579d6e5287215
- https://git.kernel.org/stable/c/a22beeb90475b5f71a477564eecf764b24f47277
- https://git.kernel.org/stable/c/f3c4532f6dac8fb5504d342e2a15e6353e5eb56e
- https://git.kernel.org/stable/c/9f860050c3d17ff8499d3998f7534d306c3da50a
- https://git.kernel.org/stable/c/ef59ff891adf9bd696917f71f841fdb23c245790
- https://git.kernel.org/stable/c/ca9338dbc64759b30741b12017c050b33c94dfa2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.