In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param_set_charp() stores… (CVE-2026-89552)
A vulnerability in the Linux kernel's parameter handling code was resolved. The issue involved improper handling of charp parameters in param_set_charp(), where the previous parameter value was released before the new allocation succeeded. This could lead to a NULL pointer dereference in zswap's compressor update if allocation failed. The fix ensures allocation and copying of the replacement parameter occur before replacing the old value.
AI Analysis
Technical Summary
The Linux kernel vulnerability (CVE-2026-89552) concerns param_set_charp(), which manages charp parameters by storing them in allocated memory and releasing the previous value upon update. The flaw was that the previous value was released before confirming the new allocation succeeded. If kmalloc_parameter() failed, the parameter was left NULL, which could cause a kernel NULL pointer dereference during zswap compressor updates before zswap initialization. The patch changes the logic to allocate and copy the new parameter first, then replace the old value only after successful allocation.
Potential Impact
If the allocation fails, the parameter is left NULL, which can cause a kernel NULL pointer dereference leading to a system crash (BUG) when zswap's compressor update is triggered before zswap is initialized. This impacts kernel stability and could cause denial of service due to kernel panic.
Mitigation Recommendations
A fix is available that changes the parameter update logic to allocate and copy the replacement parameter before releasing the previous value. Users should apply the official Linux kernel patch that addresses this issue. No additional mitigations are indicated.
In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param_set_charp() stores… (CVE-2026-89552)
Description
A vulnerability in the Linux kernel's parameter handling code was resolved. The issue involved improper handling of charp parameters in param_set_charp(), where the previous parameter value was released before the new allocation succeeded. This could lead to a NULL pointer dereference in zswap's compressor update if allocation failed. The fix ensures allocation and copying of the replacement parameter occur before replacing the old value.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability (CVE-2026-89552) concerns param_set_charp(), which manages charp parameters by storing them in allocated memory and releasing the previous value upon update. The flaw was that the previous value was released before confirming the new allocation succeeded. If kmalloc_parameter() failed, the parameter was left NULL, which could cause a kernel NULL pointer dereference during zswap compressor updates before zswap initialization. The patch changes the logic to allocate and copy the new parameter first, then replace the old value only after successful allocation.
Potential Impact
If the allocation fails, the parameter is left NULL, which can cause a kernel NULL pointer dereference leading to a system crash (BUG) when zswap's compressor update is triggered before zswap is initialized. This impacts kernel stability and could cause denial of service due to kernel panic.
Mitigation Recommendations
A fix is available that changes the parameter update logic to allocate and copy the replacement parameter before releasing the previous value. Users should apply the official Linux kernel patch that addresses this issue. No additional mitigations are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gmqc-x8hx-2ggc
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89552"]
Threat ID: 6aa4a00f55bf5e2cf5a8669e
Added to database: 09/12/2026, 00:42:55 UTC
Last enriched: 09/12/2026, 01:05:40 UTC
Last updated: 09/12/2026, 01:05:40 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.