CVE-2026-43389

Description

A flaw was found in the memfd_luo subsystem of the Linux kernel. When using memfd preservation with Live Update Operations (LUO), the kernel may incorrectly mark a memory page (folio) as clean even if it contains user data. This can lead to data loss, as the kernel might reclaim these 'dirty' folios under memory pressure, resulting in the loss of user data.

Understanding the Weakness (CWE)

Integrity,Confidentiality,Other

Technical Impact: Modify Application Data; Read Application Data; Alter Execution Logic

Frequently Asked Questions

Want to get errata notifications? Sign up here.