Riskcovery

CVE-2026-89501

ring-buffer: Hold cpu_buffer::lock when resizing a subbuf

State
Published
Severity
7.8 High
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Hold cpu_buffer::lock when resizing a subbuf

Because, ring_buffer_subbuf_order_set() can clear cpu_buffer->free_page, hold cpu_buffer->lock to prevent races with ring_buffer_alloc_read_page() and ring_buffer_free_read_page().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8e7b58c27b3c567316a51079b375b846f9223bba to before 8a496aaa3da6e8d545896c2370c7e617cc931ae2Affected
  • 8e7b58c27b3c567316a51079b375b846f9223bba to before 6fcb0b745a0b80df62eae4a93ce52a2d061f4ac2Affected
  • 8e7b58c27b3c567316a51079b375b846f9223bba to before bf242baf58de03467f226c8e29554c9495dca7fcAffected
  • 8e7b58c27b3c567316a51079b375b846f9223bba to before 24974bd0da1b47fd56c975533ead50abf754e74dAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.