Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63863

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() There is a unbalanced lock/unlock to gpusvm notifier lock: [ 931.045868] ===================================== [ 931.046509] WARNING: bad unlock balance detected! [ 931.047149] 6.19.0-rc6+xe-**************** #9 Tainted: G U [ 931.048150] ------------------------------------- [ 931.048790] kworker/u5:0/51 is trying to release lock (&gpusvm->notifier_lock) at: [
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:08b8a763a5fd9165ad9c35a0f7777a3eb299bede55d48bb104ea8b68631ee266
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gpusvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gpusvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8efaa47a871662a8c21b819cec60786f7ef17ab4","status":"affected","version":"f1d08a5864822684773105c60528e2abb577ca6c","versionType":"git"},{"lessThan":"d287dee565c3c32e1ed76ec1847af46809c29b90","status":"affected","version":"f1d08a5864822684773105c60528e2abb577ca6c","versionType":"git"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gpusvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/drm_gpusvm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"8efaa47a871662a8c21b819cec60786f7ef17ab4","status":"affected","version":"f1d08a5864822684773105c60528e2abb577ca6c","versionType":"git"},{"lessThan":"d287dee565c3c32e1ed76ec1847af46809c29b90","status":"affected","version":"f1d08a5864822684773105c60528e2abb577ca6c","versionType":"git"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/metrics/0/cvssV3_1

Source references

2 source assertions
{"url":"https://git.kernel.org/stable/c/8efaa47a871662a8c21b819cec60786f7ef17ab4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d287dee565c3c32e1ed76ec1847af46809c29b90"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ce48625759270bd535c82597881b321d4f5fda2e01e4108557eba1ad69f47993 · sha256:e900a3b991a1f793… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer