CVE-2026-53189

Description

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference, mm_counter_file() can later read freed folio state via folio_test_swapbacked(). Move the counter update before folio_put().

Why is this CVE low priority?

See ubuntu cvss score

Learn more about Ubuntu priority

Status

Show unmaintained releases

Package	Ubuntu Release	Status

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details

Severity score breakdown

CVSS version:

Base score 2.0 · Low

Base metrics

Parameter	Value
Attack vector	Local
Attack complexity	Low
Attack requirements	Present
Privileges required	Low
User interaction	None
Vulnerable system - Confidentiality impact	None
Vulnerable system - Integrity impact	Low
Vulnerable system - Availability impact	Low
Subsequent system - Confidentiality impact	None
Subsequent system - Integrity impact	None
Subsequent system - Availability impact	None

Scores

Parameter	Value
Base score	2.0 · Low
Base + Threat score	-
Base + Environmental score	-
Base + Threat + Environmental score	-

Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Base score 7.8 · High

Base metrics

Parameter	Value
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality impact	High
Integrity impact	High
Availability impact	High

Scores

Parameter	Value
Base score	7.8 · High
Exploitability score	-
Impact score	-

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

USN-8726-1
Linux kernel vulnerabilities
7 September 2026

USN-8727-1
Linux kernel (OEM) vulnerabilities
7 September 2026

USN-8728-1
Linux kernel (GCP) vulnerabilities
7 September 2026

USN-8760-1
Linux kernel (NVIDIA) vulnerabilities
15 September 2026

USN-8726-2
Linux kernel (Raspberry Pi) vulnerabilities
18 September 2026

USN-8726-3
Linux kernel (IBM) vulnerabilities
21 September 2026

USN-8800-1
Linux kernel (NVIDIA BaseOS) vulnerabilities
22 September 2026

USN-8760-2
Linux kernel (NVIDIA) vulnerabilities
22 September 2026

USN-8726-4
Linux kernel vulnerabilities
22 September 2026

USN-8728-2
Linux kernel (Azure) vulnerabilities
22 September 2026

USN-8728-3
Linux kernel (Oracle) vulnerabilities
29 September 2026

USN-8876-1
Linux kernel (Azure CVM) vulnerabilities
6 October 2026

USN-8878-1
Linux kernel (GCP) vulnerabilities
6 October 2026

USN-8879-1
Linux kernel (Oracle) vulnerabilities
6 October 2026

USN-8877-1
Linux kernel (GCP) vulnerabilities
6 October 2026

USN-8875-1
Linux kernel vulnerabilities
6 October 2026

USN-8886-1
Linux kernel (NVIDIA Tegra) vulnerabilities
6 October 2026

USN-8875-2
Linux kernel (NVIDIA) vulnerabilities
9 October 2026