CVE-2026-89760High· 7.0▾ TwilightA flaw was found in the Linux kernel's memory management (mm) and swap subsystem. This vulnerability occurs when the swap_free_hibernation_slot() function incorrectly frees a hibernation slot while a memory page (folio) is still present in…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
— → 5.7
none → medium
— → 7.8
none → high
7.8 → 5.7
high → medium
5.7 → 7.8
medium → high
7.8 → 5.7
high → medium
Last analysed / modified upstream
5.7 → 7
medium → high
A flaw was found in the Linux kernel's memory management (mm) and swap subsystem. This vulnerability occurs when the swap_free_hibernation_slot() function incorrectly frees a hibernation slot while a memory page (folio) is still present in the swap cache. This can lead to silent memory corruption, process crashes, or data instability across unrelated user applications, typically during the preparation of a hibernation image by uswsusp.
kernel: mm, swap: don't free a hibernation slot that is in the swap cache — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-15.
Affected:
No fix planned:
Not affected:
Out of support scope
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89677High· 7.0kernel: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() (CVE-2026-89677)
CVE-2026-80947High· 7.0kernel: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (CVE-2026-80947)
CVE-2026-80950Medium· 5.5kernel: i3c: renesas: Check that the transfer is valid before accessing it (CVE-2026-80950)
CVE-2026-80955Medium· 5.5kernel: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() (CVE-2026-80955)
CVE-2026-80981High· 7.0kernel: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (CVE-2026-80981)
CVE-2026-80995Medium· 5.5kernel: net: mctp: hold a reference to the route device in mctp_route_lookup() (CVE-2026-80995)