In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a… (CVE-2026-89500)
A vulnerability in the Linux kernel ring buffer implementation related to handling cached reader pages after a concurrent ring buffer resize has been resolved. The issue involved discarding a cached page using an outdated sub-buffer order, which could cause kernel crashes or memory leaks. The fix ensures that the correct page order is saved alongside the page address to prevent referencing stale values.
AI Analysis
Technical Summary
The Linux kernel ring buffer had a vulnerability where discarding a cached reader page after a concurrent resize used a mismatched sub-buffer order for the free_pages() call. This mismatch could lead to kernel crashes or memory leaks because the cached page was allocated with an old size. The resolution involved saving the actual free_page order with the page address by making free_page a buffer_data_read_page, which encapsulates both the page address and its order, ensuring correct referencing during free operations.
Potential Impact
If exploited, this flaw could cause the Linux kernel to crash or leak memory due to improper handling of cached pages after ring buffer resizing. This could affect system stability and reliability but no known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the handling of free_page to use buffer_data_read_page, which correctly tracks the page order. Users should apply the official kernel updates that include this fix. Patch status is not explicitly stated in the input, so verify with the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Discarding a… (CVE-2026-89500)
Description
A vulnerability in the Linux kernel ring buffer implementation related to handling cached reader pages after a concurrent ring buffer resize has been resolved. The issue involved discarding a cached page using an outdated sub-buffer order, which could cause kernel crashes or memory leaks. The fix ensures that the correct page order is saved alongside the page address to prevent referencing stale values.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel ring buffer had a vulnerability where discarding a cached reader page after a concurrent resize used a mismatched sub-buffer order for the free_pages() call. This mismatch could lead to kernel crashes or memory leaks because the cached page was allocated with an old size. The resolution involved saving the actual free_page order with the page address by making free_page a buffer_data_read_page, which encapsulates both the page address and its order, ensuring correct referencing during free operations.
Potential Impact
If exploited, this flaw could cause the Linux kernel to crash or leak memory due to improper handling of cached pages after ring buffer resizing. This could affect system stability and reliability but no known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the handling of free_page to use buffer_data_read_page, which correctly tracks the page order. Users should apply the official kernel updates that include this fix. Patch status is not explicitly stated in the input, so verify with the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h78f-r23h-v8hg
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89500"]
Threat ID: 6aa4a01655bf5e2cf5a866e9
Added to database: 09/12/2026, 00:43:02 UTC
Last enriched: 09/12/2026, 01:12:16 UTC
Last updated: 09/12/2026, 01:12:16 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.