CVE-2026-89503

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89503
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89503.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89503
Downstream
Related
Published
2026-09-11T19:43:51Z
Modified
2026-10-05T02:30:30Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
Details

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()

ring_buffer_alloc_read_page() is racy with ring_buffer_subbuf_order_set, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still re-allocate a new reader page and try again.

However, what is more problematic is if the value of subbuf_order changes in the middle of ring_buffer_alloc_read_page(). In that case, bpage->order might not match the actual allocated memory.

Use bpage->order for the allocation to prevent this race.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89503.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bce761d757452ba5eb77e11fecc37a04b67494e7
Fixed
2313ff69bd237aad264a5913907f374f958335a2
Fixed
2dc510957fe8fd098ab3c3147ebdf34d00cd2734
Fixed
53106e9262a310ef2c9a9321168c03705940c678
Fixed
e743527c5bfdceda1095bc0a9e596e2aebb6a9c3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89503.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89503.json"