# drm/lima: call drm_mm_init() with a valid allocation range

CVE record · `CVE-2026-93183`

- **Identifiers:** `CVE-2026-93183`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 17 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:12 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before af1f276d50c9d7ebcd25770f358ca503a89d96d7` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before fd6bc5f1d6b54047b06b82bab25a7e21e4b1c95a` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before ad4e908096dff97646f77b04e2e2825225e215f7` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before 788917ba77f5d69bd368c1d176ecceda346a2951` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before 79a3331ee436c8b1454f897d539606c9b5ebdf9f` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before e2a7cee341986cb5b544a8286edc7fb0494c592e` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before e0773ad25a34a49aece176721c466cf214e02222` (git)
  - affected: `a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before 3b3bce4a692ac60d9f4a341e6b597dd1fd0a28f9` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.2`
  - unaffected: `before 5.2` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.110 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.52 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.6 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0021, the 11th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-93183](https://www.cve.org/CVERecord?id=CVE-2026-93183)
- [NVD: CVE-2026-93183](https://nvd.nist.gov/vuln/detail/CVE-2026-93183)

### References from the CNA

- <https://git.kernel.org/stable/c/af1f276d50c9d7ebcd25770f358ca503a89d96d7>
- <https://git.kernel.org/stable/c/fd6bc5f1d6b54047b06b82bab25a7e21e4b1c95a>
- <https://git.kernel.org/stable/c/ad4e908096dff97646f77b04e2e2825225e215f7>
- <https://git.kernel.org/stable/c/788917ba77f5d69bd368c1d176ecceda346a2951>
- <https://git.kernel.org/stable/c/79a3331ee436c8b1454f897d539606c9b5ebdf9f>
- <https://git.kernel.org/stable/c/e2a7cee341986cb5b544a8286edc7fb0494c592e>
- <https://git.kernel.org/stable/c/e0773ad25a34a49aece176721c466cf214e02222>
- <https://git.kernel.org/stable/c/3b3bce4a692ac60d9f4a341e6b597dd1fd0a28f9>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-93183>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-93183/>. Everything for agents: <https://agentprime.io/llms.txt>.