CVE-2026-89501

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89501
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89501.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89501
Downstream
Published
2026-09-11T19:43:50Z
Modified
2026-09-15T03:30:33Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ring-buffer: Hold cpu_buffer::lock when resizing a subbuf
Details

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Hold cpu_buffer::lock when resizing a subbuf

Because, ring_buffer_subbuf_order_set() can clear cpu_buffer->free_page, hold cpu_buffer->lock to prevent races with ring_buffer_alloc_read_page() and ring_buffer_free_read_page().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89501.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8e7b58c27b3c567316a51079b375b846f9223bba
Fixed
8a496aaa3da6e8d545896c2370c7e617cc931ae2
Fixed
6fcb0b745a0b80df62eae4a93ce52a2d061f4ac2
Fixed
bf242baf58de03467f226c8e29554c9495dca7fc
Fixed
24974bd0da1b47fd56c975533ead50abf754e74d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89501.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.109
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89501.json"