Log in Start free

Vulnerability · Published Sep 11, 2026 · Assigned by Linux

CVE-2026-89552params: fix charp corruption on allocation failure

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 92.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param_set_charp() stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released before the replacement allocation succeeds. If kmalloc_parameter() fails, the setter returns -ENOMEM with the parameter left as NULL. Failing zswap's compressor update before zswap is initialized can later trigger: BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: 0010:strcmp+0x10/0x30 Call Trace: zswap_setup+0x3b1/0x490 zswap_enabled_param_set+0x5b/0xa0 param_attr_store+0x93/0xe0 module_attr_store+0x1c/0x30 kernfs_fop_write_iter+0x116/0x1f0 Allocate and copy the replacement first, then replace the parameter value only after allocation succeeds.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-89552
Debian:13linux6.12.111-1DEBIAN-CVE-2026-89552
Debian:14linux7.2.6-1DEBIAN-CVE-2026-89552
Debian:12linux-6.126.12.111-1~deb12u1DEBIAN-CVE-2026-89552
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-89552
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-89552
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-89552
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-89552

Affected products (as reported)

VendorProductVersions
Linux Linux e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 72835d539ed3eb4c4b85b85a3f3976c7bdc70b91e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before c7cc1edf3c0de948abcb3e4a44ee86a82403ce2fe180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 32c1f305cfad192cd98468140beedeffe4792f53e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 31b41ea8383d51992d6b0dfe3a99da1dec8ce1c1e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 614f873268c5b172804c9af6639bd17b7e1e2359e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 704ecd010d4a9b33160e40b74eb402f6b86a18e0e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 0d8e2404925a0607ffec79a53170715a46936896e180a6b7759a99a28cbcce3547c4c80822cb6c2a – before 3dfaae04243cde460d82dfc2a7dd0bb6664d20ae
Linux Linux 2.6.30

References