CVE-2026-53189 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference, mm_counter_file() can later read freed folio state via folio_test_swapbacked(). Move the counter update before folio_put().
A vulnerability in the Linux kernel's memory management for huge pages can lead to improper handling of reference counts for file-backed pages. This issue arises because the function responsible for splitting huge pages updates the resident set size (RSS) counter after releasing the last reference to a page. As a result, the memory management system could inadvertently access freed page data, potentially leading to undefined behavior or memory corruption.
Users should upgrade to the latest stable version of the Linux kernel where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/108963978a681c0c468d279cac2b930c27672877 | kernel.org | Patch |
| https://git.kernel.org/stable/c/459771c9cf30f378bdbd30fc65d17f7eb931bb59 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5f5b604e1e6bde4e889199168ee80fe8306d06ad | kernel.org | Patch |
| https://git.kernel.org/stable/c/6c29a8ba084e89499ca77b947e07ae817f9c16ce | kernel.org | Patch |
| https://git.kernel.org/stable/c/84b3212b166b446faea27ebebb7161405ffceef9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ae9d4caf6f133e884cf5fcda4982c493b35e5194 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ed5b030931292c94133437ac5e5ff580e498eabd | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.19, < 5.10.259 >= 5.11, < 5.15.210 >= 5.16, < 6.1.176 >= 6.2, < 6.6.143 >= 6.7, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 6, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 25, 2026 | New CVE Received | kernel.org |