CVE-2026-97617

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Check resize_disabled before publishing the new subbuf order

ring_buffer_subbuf_order_set() stores the new order and only then walks

the CPUs, returning -EBUSY if any of them has resizing disabled. A user

mapped buffer has resizing disabled, and __rb_map_vma() reads

buffer->subbuf_order without buffer->mutex, so an mmap of an already

mapped CPU racing the failing order change sizes the mapping with the

new order and inserts pages past the sub-buffer into the VMA.

Check the CPUs before storing the new order.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References