Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Linux kernel bug may cause system crashes
published 4 months ago
Summary
A mistake in the Linux operating system’s handling of large memory sections could let the system read memory that has already been released, which may lead to crashes or instability. The problem is fixed in newer kernel releases. Apply the latest Linux kernel updates to protect your servers.
What to do
- Update linux kernel to version 7.0.13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Linux | linux | kernel |
>= 6.19.0, < 7.0.13 Fix: upgrade to 7.0.13
|
Original advisory text
mm/huge_memory: update file PMD counter before folio_put()
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: update file PMD counter before folio_put()
__split_huge_pmd_locked() updates the file/shmem RSS counter after
dropping the PMD mapping's folio reference. If folio_put() drops the last
reference, mm_counter_file() can later read freed folio state via
folio_test_swapbacked().
Move the counter update before folio_put().
mm/huge_memory: update file PMD counter before folio_put()
__split_huge_pmd_locked() updates the file/shmem RSS counter after
dropping the PMD mapping's folio reference. If folio_put() drops the last
reference, mm_counter_file() can later read freed folio state via
folio_test_swapbacked().
Move the counter update before folio_put().
References
- https://git.kernel.org/stable/c/108963978a681c0c468d279cac2b930c27672877 URL
- https://git.kernel.org/stable/c/459771c9cf30f378bdbd30fc65d17f7eb931bb59 URL
- https://git.kernel.org/stable/c/5f5b604e1e6bde4e889199168ee80fe8306d06ad URL
- https://git.kernel.org/stable/c/6c29a8ba084e89499ca77b947e07ae817f9c16ce URL
- https://git.kernel.org/stable/c/84b3212b166b446faea27ebebb7161405ffceef9 URL
- https://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8 URL
- https://git.kernel.org/stable/c/ae9d4caf6f133e884cf5fcda4982c493b35e5194 URL
- https://git.kernel.org/stable/c/ed5b030931292c94133437ac5e5ff580e498eabd URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53189... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53189 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published25 Jun 2026
Updated20 Aug 2026
First seen20 Aug 2026
Track software like this
Free during beta