Description
In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()

ring_buffer_alloc_read_page() is racy with ring_buffer_subbuf_order_set,
it can allocate a reader page with an outdated order. This isn't a big
issue, the user can still re-allocate a new reader page and try again.

However, what is more problematic is if the value of subbuf_order
changes in the middle of ring_buffer_alloc_read_page(). In that case,
bpage->order might not match the actual allocated memory.

Use bpage->order for the allocation to prevent this race.
Published: 2026-09-11
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Race condition in Linux kernel ring buffer allocation that can lead to memory corruption
Action: Apply patch
AI Analysis

Impact

A race condition exists in the Linux kernel ring buffer subsystem where ring_buffer_alloc_read_page() may allocate a reader page using an outdated subbuf_order value. This can cause bpage->order the actual allocated memory, resulting in inconsistencies within the ring buffer and potentially corrupting kernel memory or delivering incorrect data to consumers.

Affected Systems

All Linux kernel builds before the commit that changes the allocation logic are affected. The fix the patch in future stable releases. Systems running older kernels without this patch remain vulnerable.

Risk and Exploitability

The CVSS score of 5.5 signals a moderate severity. The EPSS score is < 1%, indicating a very low probability of exploitation. No active exploits are reported and the vulnerability is not listed in the CISA KE a race condition during kernel execution; no privileged or user‑space attack path is described in the advisory.

Generated by OpenCVE AI on September 13, 2026 at 07:03 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a release that contains the patched logic, such as the current stable kernel from the Linux upstream maintainers.
  • If using a custom kernel build, apply the specific commit that replaces ring_buffer_alloc_read_page() with logic that uses bpage->order for allocation and rebuild the kernel.
  • Reboot the system after updating to ensure the new kernel code is loaded and active.

Generated by OpenCVE AI on September 13, 2026 at 07:03 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 13 Sep 2026 06:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Sat, 12 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-367
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_read_page() is racy with ring_buffer_subbuf_order_set, it can allocate a reader page with an outdated order. This isn't a big issue, the user can still re-allocate a new reader page and try again. However, what is more problematic is if the value of subbuf_order changes in the middle of ring_buffer_alloc_read_page(). In that case, bpage->order might not match the actual allocated memory. Use bpage->order for the allocation to prevent this race.
Title ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-13T06:30:09.851Z

Reserved: 2026-09-11T19:38:34.715Z

Link: CVE-2026-89503

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-11T20:19:32.547

Modified: 2026-09-13T07:17:13.457

Link: CVE-2026-89503

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-11T19:43:51Z

Links: CVE-2026-89503 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-13T07:15:17Z

Weaknesses
  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition