{"id":"CVE-2026-93058","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: Only fini scheduler after successful init\n\nmsm_ringbuffer_new() destroys a partially initialized ring through\nmsm_ringbuffer_destroy() when an allocation or sc…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: Only fini scheduler after successful init\n\nmsm_ringbuffer_new() destroys a partially initialized ring through\nmsm_ringbuffer_destroy() when an allocation or sc…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < d43e1bbfd43458b9242806eec77ea3b032134baf","Linux >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < 09b360eb6ce345996a30fad8c86e9df80f41cd7e","Linux >= 1d8a5ca436ee4a28eec14cb813f790f7cdeeee19 < e2332abed2a4d3caa59052095dc16e4ce44791ea","Linux 5.15"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:17:59.430","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93058","references":[{"url":"https://git.kernel.org/stable/c/09b360eb6ce345996a30fad8c86e9df80f41cd7e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d43e1bbfd43458b9242806eec77ea3b032134baf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e2332abed2a4d3caa59052095dc16e4ce44791ea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.769Z","epss":0.00198,"epssPercentile":0.09861,"slug":"CVE-2026-93058","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: Only fini scheduler after successful init\n\nmsm_ringbuffer_new() destroys a partially initialized ring through\nmsm_ringbuffer_destroy() when an allocation or scheduler setup step\nfails.\n\nIf drm_sched_init() fails before it finishes initializing the scheduler,\nthe failure path still calls drm_sched_fini(). That teardown path assumes\nthe scheduler work items, lists, and workqueue state were initialized.\n\nTrack successful scheduler initialization and call drm_sched_fini() only\nafter drm_sched_init() returned 0.\n\nThis issue was found by a static analysis checker and confirmed by\nmanual source review.\n\nPatchwork: https://patchwork.freedesktop.org/patch/738905/\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}