CVE-2026-89502

ring-buffer: Free cpu_buffer::free_page with subbuf_order

N/A
Published: September 11, 2026 at 07:43 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with subbuf_order When sub-buffers use an order greater than 0, cpu_buffer->free_page is allocated with subbuf_order. Use the correct order for cpu_buffer->free_page.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.8f9b94daa542a8d2532f0930f01cd9aec2d19621b
Vendor states this is fixed in 234b1a72e9706fe20c08c96f4374ec8e83b934cb (fixed)
Vendor states this is fixed in 77275ccea06eaf297e8e6ac3fc830cb72086379a (fixed)
Vendor states this is fixed in 81063bbb16c4fcf0136c9117d5e49d3621dd6a1e (fixed)
Vendor states this is fixed in 8c1ecdcdea738efe0494af908f12c0ae3a97fffa (fixed)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card