7.8

CVE-2026-89500

ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page

Discarding a cached reader page after a concurrent ring buffer resize
uses the new global subbuf_order for the free_pages() call. This
mismatched order may crashes the kernel or leaks memory because the cached
page was allocated under the old size.

Save the actual free_page order alongside the page address to ensure we
always refer to the correct value and do not rely on the potentially
stalled cpu_buffer->subbuf_order value. The simplest is to make
free_page a buffer_data_read_page which already covers exactly what we
need: a page address and a page order.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8e7b58c27b3c567316a51079b375b846f9223bba
Version < d8f52dc3c3f1f987d8cf920ccd8d66590870bf3f
Status affected
Version 8e7b58c27b3c567316a51079b375b846f9223bba
Version < a1dabe68fb53730bc0be60c5dbfd3f4c560084e7
Status affected
Version 8e7b58c27b3c567316a51079b375b846f9223bba
Version < d787d509bdf6c88c85e095247daf7456cb7fb772
Status affected
Version 8e7b58c27b3c567316a51079b375b846f9223bba
Version < 7a1fb95de5404134f8758c1295ce88986bdf117c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.8
Status affected
Version 0
Version < 6.8
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.057
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/a1dabe68fb53730bc0be60c5dbfd3f4c560084e7
https://git.kernel.org/stable/c/d787d509bdf6c88c85e095247daf7456cb7fb772
https://git.kernel.org/stable/c/7a1fb95de5404134f8758c1295ce88986bdf117c
https://git.kernel.org/stable/c/d8f52dc3c3f1f987d8cf920ccd8d66590870bf3f