{"cve":"CVE-2026-97617","nvd":{"published":"2026-09-25T11:17:15.893","modified":"2026-10-19T10:17:32.230","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Check resize_disabled before publishing the new subbuf order\n\nring_buffer_subbuf_order_set() stores the new order and only then walks\nthe CPUs, returning -EBUSY if any of them has resizing disabled. A user\nmapped buffer has resizing disabled, and __rb_map_vma() reads\nbuffer->subbuf_order without buffer->mutex, so an mmap of an already\nmapped CPU racing the failing order change sizes the mapping with the\nnew order and inserts pages past the sub-buffer into the VMA.\n\nCheck the CPUs before storing the new order.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/32bf47db9237c5b8b6f6aaa5356bb4c79d241f76","https://git.kernel.org/stable/c/9fd4ea952e6ac12a63c3fe89f08ad02771aa2c06","https://git.kernel.org/stable/c/d860c67c051685abb0460b593b193f0f45f4fa92","https://git.kernel.org/stable/c/f2099644e1b2a2c0805c5240d63ab0522d9d0174"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:56:02.509636177+00:00"},"epss":{"cve":"CVE-2026-97617","score":0.00206,"percentile":0.10452,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}