SB2026091211 - Improper control of a resource through its lifetime in Linux kernel mm

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-89760)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: 5.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause memory corruption, process crashes, or data instability.

The vulnerability exists due to improper resource lifecycle management in swap_free_hibernation_slot() when freeing a hibernation slot containing a folio in the swap cache. A local user can cause the cached folio's swap-table entry to be cleared to cause memory corruption, process crashes, or data instability.

Cluster readahead can place a folio in the swap cache for the hibernation slot.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/10d9012e83efedde8718ceaa5053f836e0c8596c
• https://git.kernel.org/stable/c/a6df73156f2d85746c69adbf13d0f5ea200e0626