CVE-2026-89748

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89748

Key Details

CVE	CVE-2026-89748
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix retry exhaustion in simple ring buffer reader swap

simple_ring_buffer_swap_reader_page() starts with retry set to 8 and

post-decrements it only after a failed link replacement. On the final

attempt, a successful replacement leaves retry at zero, while a failed

replacement leaves it at -1.

The current !retry test reverses both outcomes. It returns an error after

a successful final replacement, leaving the link update complete but the

reader bookkeeping unfinished. After a failed final replacement, it

falls through and updates the head and reader pointers as though the

replacement succeeded, which can corrupt the ring.

Treat only a negative counter as exhaustion and return the documented

-EBUSY error. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89748
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89748

Source

Reference

NVD

CVE