CVE-2026-89602: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbuf_nrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers. Retrying the same size then returns -ENOMEM because alloc_pages_bulk() has no pages to add and the unchanged return value is treated as a failure. Retrying an intermediate size allocates a temporary pointer array smaller than gbuf->nrpages and copies more existing pointers than the array can hold. Skip buffers that already satisfy the request. Once all remaining buffers have caught up, advancing z_erofs_gbuf_nrpages again describes the guaranteed minimum size across the pool.

Засегнати продукти

• Linux Linux: d6db47e571dcaecaeaafa8840d00ae849ae3907b преди 3fbdd15d5830f52661eb78be95058d101cb0c2cb; d6db47e571dcaecaeaafa8840d00ae849ae3907b преди 7267557ce98ccd07faaf3bc86382448950cc4ff6; d6db47e571dcaecaeaafa8840d00ae849ae3907b преди 7f4a89d4f0d6acaf4b756c31de48f2109a257b70; d6db47e571dcaecaeaafa8840d00ae849ae3907b преди a7d097cf01301c5da37927c8f26123d006f0fd8a
• Linux Linux: 6.10; преди 6.10; 6.12.111 до 6.12.*; 6.18.51 до 6.18.*; 7.2.4 до 7.2.*; 7.3 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-89602
• https://nvd.nist.gov/vuln/detail/CVE-2026-89602
• https://git.kernel.org/stable/c/3fbdd15d5830f52661eb78be95058d101cb0c2cb
• https://git.kernel.org/stable/c/7267557ce98ccd07faaf3bc86382448950cc4ff6
• https://git.kernel.org/stable/c/7f4a89d4f0d6acaf4b756c31de48f2109a257b70
• https://git.kernel.org/stable/c/a7d097cf01301c5da37927c8f26123d006f0fd8a