CVE-2026-89754

A flaw was found in the Linux kernel's memory management mm/pagewalk component. An issue in the walkpmdrange function, where a stale walk-action state is not properly reset, can lead to duplicate walk callbacks. A local attacker could exploit this to trigger an out-of-bounds write, potentially...

CVE-2026-89754

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-action escaping walkpmdrange If -pmdentry sets walk-action = ACTIONAGAIN, the pmdnone check is retried. The PMD entry may be cleared at the point of retry. In this case, if walk-ops-installpte is not...

CVE-2026-89754 mm/pagewalk: fix stale walk->action escaping walk_pmd_range()

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-action escaping walkpmdrange If -pmdentry sets walk-action = ACTIONAGAIN, the pmdnone check is retried. The PMD entry may be cleared at the point of retry. In this case, if walk-ops-installpte is not...

CVE-2026-89754

A stale state bug in the Linux kernel's mm/pagewalk subsystem, specifically in walk_pmd_range(), allows a local attacker to trigger an out-of-bounds write in __mincore_unmapped_range via the mincore syscall. When walk->action is set to ACTION_AGAIN and the corresponding PMD entry is cleared be...