CVE-2026-98057ring-buffer: Add checking nr_subbufs to persistent ring buffer validation
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Sashiko reported that the code was using meta->nr_subbufs without making sure that it matched the nr_pages + 1 on data that was assuming the two were the same. Add a check to the persistent ring buffer validation code to make sure that the saved nr_subbufs matches what we expect.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Undergoing Analysis
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3ec743d558f111d8999aea24577ba66c65ee2eeb before f0467190e6a9fc61e343c8064ef16aad513788c3; from f5b95f1fa2ef3a03f49eeec658ba97e721412b32 before 364a31052aa9ef91db137f82d797366007cd85b7; from f5b95f1fa2ef3a03f49eeec658ba97e721412b32 before 69d502457e3f76142f7fcf6e2625e80e0ce8a60f; from f5b95f1fa2ef3a03f49eeec658ba97e721412b32 before 6c001a62c34f13fe1c6a24304c289b387d9e697d; 0d547a6f5e8fad26ebc12f501d7d19fccdbad6bf; from 6.12.16 before 6.12.111; from 6.13.4 before 6.14 | CNA record |
References
- https://git.kernel.org/stable/c/f0467190e6a9fc61e343c8064ef16aad513788c3
- https://git.kernel.org/stable/c/364a31052aa9ef91db137f82d797366007cd85b7
- https://git.kernel.org/stable/c/69d502457e3f76142f7fcf6e2625e80e0ce8a60f
- https://git.kernel.org/stable/c/6c001a62c34f13fe1c6a24304c289b387d9e697d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.