kernel: module: validate string table section types (CVE-2026-89556)

Overview

A flaw was found in the Linux kernel. This vulnerability arises from insufficient validation of string table section types within ELF (Executable and Linkable Format) files. A local attacker could exploit this by providing a specially crafted ELF module, leading to the kernel attempting to access memory outside of its allocated boundaries. This out-of-bounds memory access could result in system instability, causing a denial of service, or potentially lead to the disclosure of sensitive information.

Vendor advisories

• Red Hat VEX · Moderate · updated 2026-09-15 · vex

kernel: module: validate string table section types — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-15.

Not affected:

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Red Hat OpenShift Container Platform 4

Remediation

Refer to the advisory for fix availability.