SB20260912230 - Unchecked Return Value in Linux kernel sunrpc

Description

This security bulletin contains information about 1 vulnerability.

1) Unchecked Return Value (CVE-ID: CVE-2026-89547)

CWE-ID: CWE-252 - Unchecked Return Value

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to corrupt kernel memory.

The vulnerability exists due to unchecked return values in the SUNRPC RPC service pool counter initialization in __svc_create() when starting an RPC service while per-CPU counter allocation fails. A local privileged user can start an RPC service under allocation failure conditions to corrupt kernel memory.

Exploitation requires memory pressure or fault injection during RPC server startup; a remote peer cannot induce the failed allocation state on its own.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3a2b7649de76376a69f1d3ed2a539fb15907cd4d
• https://git.kernel.org/stable/c/43e11e164704dde975c9edb370de1a06bec67270
• https://git.kernel.org/stable/c/b541a15046976e481618726cc23db0fb22d576db
• https://git.kernel.org/stable/c/bd1ef2cfb44d72b7aa6943e87b206eb0e30fbd0c