CVE-2026-74602ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() In rb_allocate_cpu_buffer(), bpage->order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE_SIZE if when freed: free_buffer_page() relies on this value. Align the value with the actual allocation size (buffer::subbuf_order).
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f9b94daa542a8d2532f0930f01cd9aec2d19621b before 7c620d89bae1a926ab7d626600285d3516c9f3c4; from f9b94daa542a8d2532f0930f01cd9aec2d19621b before 2e37f2bf111429fbfa4d985b12df3ba496ca70aa; from f9b94daa542a8d2532f0930f01cd9aec2d19621b before 3b3e0a6ee5bb3ac000f135beef26b2b7ed1a771a; from f9b94daa542a8d2532f0930f01cd9aec2d19621b before 6d014e44b68ddd43f71288d2a4dbb1a259869149 | CNA record |
References
- https://git.kernel.org/stable/c/7c620d89bae1a926ab7d626600285d3516c9f3c4
- https://git.kernel.org/stable/c/2e37f2bf111429fbfa4d985b12df3ba496ca70aa
- https://git.kernel.org/stable/c/3b3e0a6ee5bb3ac000f135beef26b2b7ed1a771a
- https://git.kernel.org/stable/c/6d014e44b68ddd43f71288d2a4dbb1a259869149
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.