CVE-2026-89499

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89499

Key Details

CVE	CVE-2026-89499
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Stop remote reader update when page swap fails

The remote swap_reader_page callback can return -EBUSY when the writer

moves the head before the remote catches it, particularly during an event

storm on a small buffer. __rb_get_reader_page_from_remote() currently

warns about that failure but continues with the unchanged reader ID and

rearranges the local page list as though the swap succeeded.

Handle the callback failure as a recoverable error. Report it with

pr_warn_ratelimited() and return NULL. Callers already handle a NULL reader

page as a failed attempt. This avoids splicing the same page as both the

previous and new reader without flooding the log under contention. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89499
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89499

Source

Reference

NVD

CVE