CVE-2026-89967

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that the PFN arrays retain their page-granular representation. If a compoun...

EUVD-2026-80567

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that the PFN arrays retain their page-granular representation. If a compoun...

CVE-2026-89967

CVE-2026-89967 is an out-of-bounds write in the Linux kernel 's mm/migrate_device subsystem. The functions migrate_device_range() and migrate_device_pfns() clear entries following a compound folio to maintain page-granular PFN arrays, but fail to limit writes to the number of slots remaining in t...

CVE-2026-89967 mm/migrate_device: avoid out-of-bounds writes for compound folios

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that the PFN arrays retain their page-granular representation. If a compoun...