CVE record · CVE-2026-93183

drm/lima: call drm_mm_init() with a valid allocation range

No CVSS scoreEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:12 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before af1f276d50c9d7ebcd25770f358ca503a89d96d7 git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before fd6bc5f1d6b54047b06b82bab25a7e21e4b1c95a git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before ad4e908096dff97646f77b04e2e2825225e215f7 git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before 788917ba77f5d69bd368c1d176ecceda346a2951 git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before 79a3331ee436c8b1454f897d539606c9b5ebdf9f git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before e2a7cee341986cb5b544a8286edc7fb0494c592e git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before e0773ad25a34a49aece176721c466cf214e02222 git
  • affected a1d2a6339961efc078208dc3b2f006e9e9a8e119 to before 3b3bce4a692ac60d9f4a341e6b597dd1fd0a28f9 git
Other versions: unaffected
Linux Linux
  • affected 5.2
  • unaffected before 5.2 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.52 to 6.18.*, inclusive semver
  • unaffected 7.2.6 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-93183
CNA
Linux
Published
17 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 11th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.