CVE-2026-53189
mm/huge_memory: update file PMD counter before folio_put()
Description
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference, mm_counter_file() can later read freed folio state via folio_test_swapbacked(). Move the counter update before folio_put().
INFO
Published Date :
June 25, 2026, 9:16 a.m.
Last Modified :
July 6, 2026, 12:38 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
Solution
- Update file/shmem RSS counter before calling folio_put().
- Ensure counter update occurs before folio reference drop.
- Review and apply kernel patches related to huge_memory.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-53189.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-53189 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-53189
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-53189 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-53189 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jul. 06, 2026
Action Type Old Value New Value Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.176 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.143 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.210 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.19 up to (excluding) 5.10.259 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.36 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.94 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.13 *cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:* Added Reference Type kernel.org: https://git.kernel.org/stable/c/108963978a681c0c468d279cac2b930c27672877 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/459771c9cf30f378bdbd30fc65d17f7eb931bb59 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/5f5b604e1e6bde4e889199168ee80fe8306d06ad Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/6c29a8ba084e89499ca77b947e07ae817f9c16ce Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/84b3212b166b446faea27ebebb7161405ffceef9 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ae9d4caf6f133e884cf5fcda4982c493b35e5194 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/ed5b030931292c94133437ac5e5ff580e498eabd Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 28, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 25, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': '84b3212b166b446faea27ebebb7161405ffceef9', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': '108963978a681c0c468d279cac2b930c27672877', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': '459771c9cf30f378bdbd30fc65d17f7eb931bb59', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': 'ae9d4caf6f133e884cf5fcda4982c493b35e5194', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': '6c29a8ba084e89499ca77b947e07ae817f9c16ce', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': '5f5b604e1e6bde4e889199168ee80fe8306d06ad', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': 'ed5b030931292c94133437ac5e5ff580e498eabd', 'versionType': 'git'}, {'status': 'affected', 'version': 'fadae2953072e9005c5f1d64e1049edb043494dc', 'lessThan': '8d878059924f12c1bc24556a92ec56add74de3c8', 'versionType': 'git'}], 'programFiles': ['mm/huge_memory.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.19'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.19', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.259', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['mm/huge_memory.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference, mm_counter_file() can later read freed folio state via folio_test_swapbacked(). Move the counter update before folio_put(). Added Reference https://git.kernel.org/stable/c/108963978a681c0c468d279cac2b930c27672877 Added Reference https://git.kernel.org/stable/c/459771c9cf30f378bdbd30fc65d17f7eb931bb59 Added Reference https://git.kernel.org/stable/c/5f5b604e1e6bde4e889199168ee80fe8306d06ad Added Reference https://git.kernel.org/stable/c/6c29a8ba084e89499ca77b947e07ae817f9c16ce Added Reference https://git.kernel.org/stable/c/84b3212b166b446faea27ebebb7161405ffceef9 Added Reference https://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8 Added Reference https://git.kernel.org/stable/c/ae9d4caf6f133e884cf5fcda4982c493b35e5194 Added Reference https://git.kernel.org/stable/c/ed5b030931292c94133437ac5e5ff580e498eabd