CVE-2026-53189
In Linux kernel CVE-2026-53189, the issue is in mm/huge_memory where __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping’s folio reference. If folio_put() drops the last reference, mm_counter_file() can read freed folio state via folio_test_swapbacked(). Th...