High severity · published Jul 19, 2026
CVE-2026-63863
drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()
8.8
CVSS
0.1%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm()
There is a unbalanced lock/unlock to gpusvm notifier lock:
[ 931.045868] =====================================
[ 931.046509] WARNING: bad unlock balance detected!
[ 931.047149] 6.19.0-rc6+xe-**************** #9 Tainted: G U
[ 931.048150] -------------------------------------
[ 931.048790] kworker/u5:0/51 is trying to release lock (&gpusvm->notifier_lock) at:
[ 931.049801] [<ffffffffa090c0d8>] drm_gpusvm_scan_mm+0x188/0x460 [drm_gpusvm_helper]
[ 931.050802] but there are no more locks to release!
[ 931.051463]
The drm_gpusvm_notifier_unlock() sits under err_free label and the
first jump to err_free is just before calling the
drm_gpusvm_notifier_lock() causing unbalanced unlock.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
7.0 before 7.0.10 · source: NVD
LI
Linux · Linux
f1d08a5864822684773105c60528e2abb577ca6c before 8efaa47a871662a8c21b819cec60786f7ef17ab4; f1d08a5864822684773105c60528e2abb577ca6c before d287dee565c3c32e1ed76ec1847af46809c29b90; 7.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-63863
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-63863
Patch
https://git.kernel.org/stable/c/8efaa47a871662a8c21b819cec60786f7ef17ab4
Patch
https://git.kernel.org/stable/c/d287dee565c3c32e1ed76ec1847af46809c29b90
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability