CVE-2026-53189

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: update file PMD counter before folio_put()

__split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference, mm_counter_file() can later read freed folio state via folio_test_swapbacked().

Move the counter update before folio_put().

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= fadae2953072e9005c5f1d64e1049edb043494dc, < 84b3212b166b446faea27ebebb7161405ffceef9; >= fadae2953072e9005c5f1d64e1049edb043494dc, < 108963978a681c0c468d279cac2b930c27672877; >= fadae2953072e9005c5f1d64e1049edb043494dc, < 459771c9cf30f378bdbd30fc65d17f7eb931bb59; >= fadae2953072e9005c5f1d64e1049edb043494dc, < ae9d4caf6f133e884cf5fcda4982c493b35e5194; >= fadae2953072e9005c5f1d64e1049edb043494dc, < 6c29a8ba084e89499ca77b947e07ae817f9c16ce; >= fadae2953072e9005c5f1d64e1049edb043494dc, < 5f5b604e1e6bde4e889199168ee80fe8306d06ad; >= fadae2953072e9005c5f1d64e1049edb043494dc, < ed5b030931292c94133437ac5e5ff580e498eabd; >= fadae2953072e9005c5f1d64e1049edb043494dc, < 8d878059924f12c1bc24556a92ec56add74de3c8
LinuxLinux4.19

References

Timeline

Published
Jun 25, 2026
Last modified
Oct 19, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-53194.3A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file CVE-2026-531905.5In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fencCVE-2026-531917.8In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries CVE-2026-531927.8In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer oCVE-2026-531937.8In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Forcibly close timer instances at closing When snd_timer CVE-2026-531947.8In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi_105_prepareCVE-2026-531957.8In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() build_i2c_CVE-2026-531966.8In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_inCVE-2026-531975.5In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() iptfs_destroy_CVE-2026-531988.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCELCVE-2026-531997.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf netvsc_copy_CVE-2026-53207.3A vulnerability was detected in vanna-ai vanna up to 2.0.2. Affected by this vulnerability is an unknown functionality of the file /api/vann
CVE-2026-53189: High severity, CVSS 7.8 | Vulnix