CVE-2026-89499

High

Description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Stop remote reader update when page swap fails The remote swap_reader_page callback can return -EBUSY when the writer moves the head before the remote catches it, particularly during an event storm on a small buffer. __rb_get_reader_page_from_remote() currently warns about that failure but continues with the unchanged reader ID and rearranges the local page list as though the swap succeeded. Handle the callback failure as a recoverable error. Report it with pr_warn_ratelimited() and return NULL. Callers already handle a NULL reader page as a failed attempt. This avoids splicing the same page as both the previous and new reader without flooding the log under contention.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedSep 11, 2026
First seenSep 11, 2026

How to fix

Update
  • Linux Linuxa14a97048e48471e283d76879b83d2ae323e0722, 5eab74874d11160725c42ab676ba97a797a362eb or later

Affected products

ProductAffected versionsFixed in
Linux Linux2e67fabd8b77c4f482df9b211bca1b495c6c2c24 ≤ v < a14a97048e48471e283d76879b83d2ae323e0722, 2e67fabd8b77c4f482df9b211bca1b495c6c2c24 ≤ v < 5eab74874d11160725c42ab676ba97a797a362eb, 7.1a14a97048e48471e283d76879b83d2ae323e0722, 5eab74874d11160725c42ab676ba97a797a362eb

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.