All vulnerabilities
CVE-2026-98057

Linux: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in364a31052aa9ef91db137f82d797366007cd85b7Also 69d502457e3f76142f7fcf6e2625e80e0ce8a60f, 6c001a62c34f13fe1c6a24304c289b387d9e697d and 2 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Add checking nr_subbufs to persistent ring buffer validation

Sashiko reported that the code was using meta->nr_subbufs without making sure that it matched the nr_pages + 1 on data that was assuming the two were the same.

Add a check to the persistent ring buffer validation code to make sure that the saved nr_subbufs matches what we expect.

Text from CVE List

Affected versions 13

  • Linuxaffected: 3ec743d558f111d8999aea24577ba66c65ee2eeb before f0467190e6a9fc61e343c8064ef16aad513788c3CVE List
  • Linuxaffected: f5b95f1fa2ef3a03f49eeec658ba97e721412b32 before 364a31052aa9ef91db137f82d797366007cd85b7CVE List
  • Linuxaffected: f5b95f1fa2ef3a03f49eeec658ba97e721412b32 before 69d502457e3f76142f7fcf6e2625e80e0ce8a60fCVE List
  • Linuxaffected: f5b95f1fa2ef3a03f49eeec658ba97e721412b32 before 6c001a62c34f13fe1c6a24304c289b387d9e697dCVE List
  • Linuxaffected: 0d547a6f5e8fad26ebc12f501d7d19fccdbad6bfCVE List
  • Linuxaffected: 6.12.16 before 6.12.111CVE List
  • Linuxaffected: 6.13.4 before 6.14CVE List
  • Linuxaffected: 6.14CVE List
  • Linuxunaffected: all versions before 6.14CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4