{"id":"CVE-2026-53189","revision":"73be665fdb5a434392186b843e82eb9c","records":[{"revision":"73be665fdb5a434392186b843e82eb9c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-53189","aliases":[],"title":"mm/huge_memory: update file PMD counter before folio_put()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: update file PMD counter before folio_put()\n\n__split_huge_pmd_locked() updates the file/shmem RSS counter after\ndropping the PMD mapping's folio reference.  If folio_put() drops the last\nreference, mm_counter_file() can later read freed folio state via\nfolio_test_swapbacked().\n\nMove the counter update before folio_put().","state":0,"publishedAt":"2026-06-25T08:39:01.708+00:00","modifiedAt":"2026-10-19T19:57:27.48+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"mm/huge_memory.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"84b3212b166b446faea27ebebb7161405ffceef9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"108963978a681c0c468d279cac2b930c27672877\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"459771c9cf30f378bdbd30fc65d17f7eb931bb59\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"ae9d4caf6f133e884cf5fcda4982c493b35e5194\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"6c29a8ba084e89499ca77b947e07ae817f9c16ce\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"5f5b604e1e6bde4e889199168ee80fe8306d06ad\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"ed5b030931292c94133437ac5e5ff580e498eabd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fadae2953072e9005c5f1d64e1049edb043494dc\",\n                            \"lessThan\": \"8d878059924f12c1bc24556a92ec56add74de3c8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"mm/huge_memory.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.259\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.210\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.176\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.143\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.94\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.36\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0.13\",\n                            \"lessThanOrEqual\": \"7.0.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/84b3212b166b446faea27ebebb7161405ffceef9","https://git.kernel.org/stable/c/108963978a681c0c468d279cac2b930c27672877","https://git.kernel.org/stable/c/459771c9cf30f378bdbd30fc65d17f7eb931bb59","https://git.kernel.org/stable/c/ae9d4caf6f133e884cf5fcda4982c493b35e5194","https://git.kernel.org/stable/c/6c29a8ba084e89499ca77b947e07ae817f9c16ce","https://git.kernel.org/stable/c/5f5b604e1e6bde4e889199168ee80fe8306d06ad","https://git.kernel.org/stable/c/ed5b030931292c94133437ac5e5ff580e498eabd","https://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53189","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-53189","identifiers":["CVE-2026-53189"]},"retained":false,"historicalAffected":[]}],"coverage":[]}