CVE-2026-89593
Linux · Kernel
A logic error in the Linux kernel hugetlb implementation allows a local, authenticated attacker to cause a reservation count underflow, potentially leading to system instability.
Executive summary
A vulnerability in the Linux kernel hugetlb subsystem allows a local attacker to trigger a reservation count underflow, leading to integrity and availability risks.
Vulnerability
The vulnerability exists within the __unmap_hugepage_range function, where improper handling of reservation adjustments during unmapping can lead to an underflow when a folio is shared between parent and child processes. This flaw requires a local attacker with low privileges to trigger the race or specific unmapping sequence.
Business impact
The exploitation of this vulnerability can lead to memory corruption or system crashes, resulting in unexpected service downtime. With a CVSS score of 7.1, the high severity reflects the potential for significant impact on system stability and resource integrity, even though the attack vector is limited to local, low-privileged users.
Remediation
Immediate Action: Update the Linux kernel to version 6.18.50, 7.2.4, or later versions that incorporate the fix.
Proactive Monitoring: Monitor system logs for kernel panics or unexpected memory management errors that may indicate exploitation attempts.
Compensating Controls: Restrict access to the system to only authorized users, as this vulnerability requires local access to the environment to execute.
Exploitation status
Public Exploit Available: No (exploit_available: false)
Analyst recommendation
Given the potential for system instability and the critical nature of kernel-level vulnerabilities, administrators should prioritize patching their Linux environments. Applying the provided stable kernel updates is the only effective way to remediate this logic flaw and ensure long-term system reliability.
More Linux CVEs all →
History
CVE Brief tracked this CVE 1 day before it had a CVSS score.
- Disclosed CVE record published
- Collected by CVE Brief No CVSS score yet; tracked as early warning
- CVSS score assigned 7.1 (3.1)
- Analyst report written