Linux Kernel: 25 Vulnerabilities Patched in Single-Day Disclosure Event
Key findings • 25 Linux kernel vulnerabilities disclosed on September 11, 2026, affecting multiple subsystems. • Vulnerabilities span memory management, tracing, device drivers, and security …
Key findings
- 25 Linux kernel vulnerabilities disclosed on September 11, 2026, affecting multiple subsystems.
- Vulnerabilities span memory management, tracing, device drivers, and security modules.
- All disclosed vulnerabilities were patched on the same day as their release.
- Key areas of concern include memory reclamation, race conditions, and driver-specific flaws.
- The fixes were integrated into the kernel on September 11, 2026.
On September 11, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel. These vulnerabilities span various subsystems, including memory management, tracing, and device drivers, with fixes released on the same day as their disclosure. The disclosures highlight ongoing efforts to refine kernel stability and security across a wide range of components.
Several vulnerabilities relate to memory management (mm) and its associated subsystems. CVE-2026-89772 addresses a write-protection issue for folios during btrfs data writeback. CVE-2026-89760 and CVE-2026-89759 deal with memory reclamation and potential soft lockups, specifically concerning hibernation slots in the swap cache and scanning task stacks, respectively. CVE-2026-89758 and CVE-2026-89757 focus on handling PMDs and unevictable folios during memory migration. CVE-2026-89756 reports on RCU-tasks quiescent states in migrate_pages_batch, while CVE-2026-89753 addresses similar RCU-tasks stalls in shrink_lruvec. CVE-2026-89752 details a race condition in memory reclaim when limit updates are superseded. CVE-2026-89750 and CVE-2026-89749 relate to tracing, with fixes for clearing copied tracing state before fork duplication and preventing crashes when passing error pointers to kthread_stop. CVE-2026-89754 addresses stale walk->action escaping in mm/pagewalk.
Other vulnerabilities touch upon device drivers and core kernel functionalities. CVE-2026-89773 resolves an issue in the drm/amd/display driver where HDCP configuration was skipped in a transition state. CVE-2026-89771 fixes a race condition in the ring-buffer subsystem related to subbuffer resizing. CVE-2026-89770 prevents the freeing of non-existent integrity payloads in the iomap subsystem. CVE-2026-89769 addresses an IRQ leak on the error path in the nxp-pit clocksource driver. CVE-2026-89768 corrects the user path of nested backing files in the fs subsystem. CVE-2026-89767 fixes a double free in the ovl (overlayfs) module on a casefold-mismatch path. CVE-2026-89766 ensures the exec_update_lock is held around namespace ioctls in the pidfd subsystem. CVE-2026-89765 resolves an issue with zero-initializing old itimerval before copying to userspace on sparc64. CVE-2026-89763 fixes TPM teardown ordering in the KEYS: trusted subsystem. CVE-2026-89762 addresses a use-after-free in AppArmor caused by begin_current_label_crit_section(), and CVE-2026-89761 fixes an out-of-bounds write when null-terminating a label vector in AppArmor. CVE-2026-89764 fixes a race condition between concurrent revokers in the rust: devres subsystem. Finally, CVE-2026-89751 corrects off-by-one errors in port I/O handling within the x86/tdx subsystem.
The rapid disclosure and patching of these 25 vulnerabilities underscore the dynamic nature of kernel development and security maintenance. Users of the Linux kernel are advised to apply the relevant patches promptly to mitigate potential risks associated with these issues. The breadth of affected subsystems indicates the importance of regular kernel updates to maintain a secure and stable operating environment.
The fixes for all 25 vulnerabilities were integrated into the kernel on September 11, 2026. Specific version numbers for the patches are not detailed in the provided information, but users should ensure their systems are updated to the latest stable kernel release.
This batch of disclosures highlights the continuous effort to address complex issues within the Linux kernel, ranging from subtle race conditions in memory management to security flaws in device drivers and security modules like AppArmor and TDX. Maintaining up-to-date kernel versions is crucial for users to benefit from these collective security enhancements.