Vulnerability details

CVE-2026-89499

Linux Linux

ring-buffer: Stop remote reader update when page swap fails

CVSS 3.1
7.8High

Official description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page callback can return -EBUSY when the writer moves the head before the remote catches it, particularly during an event storm on a small buffer. __rb_get_reader_page_from_remote() currently warns about that failure but continues with the unchanged reader ID and rearranges the local page list as though the swap succeeded. Handle the callback failure as a recoverable error. Report it with pr_warn_ratelimited() and return NULL. Callers already handle a NULL reader page as a failed attempt. This avoids splicing the same page as both the previous and new reader without flooding the log under contention.

CVSS scores

ScoreVersionSourceVector
7.8High 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Linux Linux 7.1 CVEProject cvelistV5 (CNA)
Linux Linux 2e67fabd8b77c4f482df9b211bca1b495c6c2c24 ≤ v < a14a97048e48471e283d76879b83d2ae323e0722 CVEProject cvelistV5 (CNA)
Linux Linux 2e67fabd8b77c4f482df9b211bca1b495c6c2c24 ≤ v < 5eab74874d11160725c42ab676ba97a797a362eb CVEProject cvelistV5 (CNA)

References and advisories

2
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-09-11
Last updated
2026-10-19
State
Published
Assigner (CNA)
Linux

Exploit prediction (EPSS)

0.16%
Probability of exploitation in 30 days
5.7%
Percentile (among all CVEs)

Weaknesses (CWE)

  • —