CVE-2026-98057: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Add checking nrsubbufs to persistent ring buffer validation
Sashiko reported that the code was using meta->nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same.
Add a check to the persistent ring buffer validation code to make sure that the saved nrsubbufs matches what we expect.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add a check to persistent ring buffer validation to verify that the saved meta->nr_subbufs matches nr_pages + 1 before using it.
Event History
Frequently Asked Questions
How can I identify persistent ring buffer metadata that would fail the added validation?
Check whether the saved meta->nr_subbufs value matches nr_pages + 1. A mismatch is the condition the new validation is intended to detect.
Does the available information identify affected or fixed Linux kernel versions?
No specific affected or fixed kernel versions are provided. The issue is described as resolved, and three stable kernel commit references are supplied.