SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89748

HIGH · CVSS 7.8 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's simple ring buffer implementation, specifically in the `simple_ring_buffer_swap_reader_page()` function, where improper handling of retry attempts can lead to corrupted ring buffer states. This flaw may result in inconsistent reader bookkeeping, potentially causing data integrity issues during concurrent operations. Organizations utilizing the Linux kernel, particularly those relying on tracing and logging functionalities, should prioritize addressing this vulnerability to maintain system stability and data accuracy.

CVE
CVE-2026-89748
Severity
HIGH
CVSS
7.8
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer reader swap simple_ring_buffer_swap_reader_page() starts with retry set to 8 and post-decrements it only after a failed link replacement. On the final attempt, a successful replacement leaves retry at zero, while a failed replacement leaves it at -1. The current !retry test reverses both outcomes. It returns an error after a successful final replacement, leaving the link update complete but the reader bookkeeping unfinished. After a failed final replacement, it falls through and updates the head and reader pointers as though the replacement succeeded, which can corrupt the ring. Treat only a negative counter as exhaustion and return the documented -EBUSY error.