CVE-2026-89745

Source
https://cve.org/CVERecord?id=CVE-2026-89745
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89745.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89745
Downstream
Published
2026-09-11T19:46:50Z
Modified
2026-09-13T03:47:20Z
Summary
debugfs: Fix lockdown check for mmap_prepare
Details

In the Linux kernel, the following vulnerability has been resolved:

debugfs: Fix lockdown check for mmap_prepare

Commit 651fdda8406d ("relay: update relay to use mmap_prepare") changed the mmap file operation to mmap_prepare for relayfs, but the lockdown check in debugfs was not updated accordingly.

This prevents debugfs from being locked down when the kernel is in integrity mode if a file uses mmap_prepare but not mmap.

Since the conversion to mmap_prepare across the kernel is not yet complete, update the lockdown check to look for both mmap and mmap_prepare to ensure comprehensive coverage.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89745.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
651fdda8406d42a5004c5c79f269540a85d6a1ab
Fixed
e7f6a6b5741d16fdac7adaecbe0fa52ae756f208
Fixed
f81808de37338aac8e167f99bfae647b1b835c70

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89745.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89745.json"