CVE-2026-74634

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...

CVE-2026-74634

This vulnerability affects the Linux kernel ring-buffer subsystem. The root cause is that ring_buffer_subbuf_order_set() frees buffer pages even when resizing is disabled, exposing non-consuming readers to a use-after-free via rb_advance_iter() . The fix returns -EBUSY on resize_disabled, matchin...