CVE-2026-53189
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_hug
CVSS
7.8
High
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Published: Jun 25, 2026 · Last modified: Oct 19, 2026 · CWE-416
0.1%EPSS · 30 days0.1%
2026-09-282026-10-25
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_huge_pmd_locked() updates the file/shmem RSS counter after dropping the PMD mapping's folio reference. If folio_put() drops the last reference, mm_counter_file() can later read freed folio state via folio_test_swapbacked(). Move the counter update before folio_put().
- git.kernel.orghttps://git.kernel.org/stable/c/108963978a681c0c468d279cac2b930c27672877
- git.kernel.orghttps://git.kernel.org/stable/c/459771c9cf30f378bdbd30fc65d17f7eb931bb59
- git.kernel.orghttps://git.kernel.org/stable/c/5f5b604e1e6bde4e889199168ee80fe8306d06ad
- git.kernel.orghttps://git.kernel.org/stable/c/6c29a8ba084e89499ca77b947e07ae817f9c16ce
- git.kernel.orghttps://git.kernel.org/stable/c/84b3212b166b446faea27ebebb7161405ffceef9
- git.kernel.orghttps://git.kernel.org/stable/c/8d878059924f12c1bc24556a92ec56add74de3c8
- git.kernel.orghttps://git.kernel.org/stable/c/ae9d4caf6f133e884cf5fcda4982c493b35e5194
- git.kernel.orghttps://git.kernel.org/stable/c/ed5b030931292c94133437ac5e5ff580e498eabd
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-869167.8 HIG—
———A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2. An app may be able to execute arbitrary code with kernel privileges.4hCVE-2026-1126558.8 HIG—
———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.3hCVE-2026-1126518.8 HIG—
———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.3hCVE-2026-1126378.8 HIG—
———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.3hCVE-2026-1126268.8 HIG—
———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.3hCVE-2026-1126238.8 HIG—
———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.3h