CVE-2026-74602 PUBLISHED

ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

Assigner: Linux
Reserved: 15.08.2026 Published: 22.08.2026 Updated: 22.08.2026

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

In rb_allocate_cpu_buffer(), bpage->order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE_SIZE if when freed: free_buffer_page() relies on this value. Align the value with the actual allocation size (buffer::subbuf_order).

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to 2e37f2bf111429fbfa4d985b12df3ba496ca70aa (excl.)
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to 3b3e0a6ee5bb3ac000f135beef26b2b7ed1a771a (excl.)
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to 6d014e44b68ddd43f71288d2a4dbb1a259869149 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.8 is affected
  • unaffected from 0 to 6.8 (excl.)
  • unaffected from 6.18.45 to 6.18.* (incl.)
  • unaffected from 7.1.9 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References