CVE-2026-74634 PUBLISHED

ring-buffer: Prevent subbuf order change when resizing is disabled

Assigner: Linux
Reserved: 15.08.2026 Published: 22.08.2026 Updated: 22.08.2026

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Prevent subbuf order change when resizing is disabled

Because ring_buffer_subbuf_order_set() frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free (rb_advance_iter()).

Return -EBUSY on resize_disabled, matching ring_buffer_resize() behaviour.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to b45b91db41379ee5fb36c187d6d7c37b725cbe8e (excl.)
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to 62978cf6347972c04130e4e841ba404504d92b32 (excl.)
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to 7568e9e717e7540bd05bcc007f5d76fcaff3cdff (excl.)
  • affected from f9b94daa542a8d2532f0930f01cd9aec2d19621b to bf98d7b0d5a99991e47e66cee4eb1d3fa514be97 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.8 is affected
  • unaffected from 0 to 6.8 (excl.)
  • unaffected from 6.12.104 to 6.12.* (incl.)
  • unaffected from 6.18.45 to 6.18.* (incl.)
  • unaffected from 7.1.9 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References