CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order
Published Sep 11, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Free cpubuffer::freepage with subbuforder
When sub-buffers use an order greater than 0, cpubuffer->freepage is allocated with subbuforder. Use the correct order for cpubuffer->freepage.
Event History
Sep 11, 2026
CVE Published
via MITRE·07:43 PM
Data Sourced
via MITRE·07:43 PM
Description
Frequently Asked Questions
1
When is this issue triggered?
The issue applies when ring-buffer sub-buffers are configured with an order greater than 0. In that case, cpu_buffer->free_page is allocated using subbuf_order but was not freed using the matching order.
2
What is the relevant remediation?
Apply a kernel version containing the referenced stable commits. The fix frees cpu_buffer->free_page with subbuf_order, matching the allocation order.