SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89500

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of cached reader pages during concurrent ring buffer resizing, potentially leading to kernel crashes or memory leaks due to a mismatch in the page allocation order. This issue arises from the improper management of the free_page order, which can result in instability within the system. System administrators and developers using affected Linux kernel versions should prioritize applying the relevant patches to mitigate these risks.

CVE
CVE-2026-89500
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuf_order for the free_pages() call. This mismatched order may crashes the kernel or leaks memory because the cached page was allocated under the old size. Save the actual free_page order alongside the page address to ensure we always refer to the correct value and do not rely on the potentially stalled cpu_buffer->subbuf_order value. The simplest is to make free_page a buffer_data_read_page which already covers exactly what we need: a page address and a page order.