Heap Buffer Overflow Vulnerability in Linux Kernel's Persistent RAM Management

CVE-2026-46253

What is CVE-2026-46253?

A vulnerability in the Linux kernel's persistent RAM management could allow for a heap buffer overflow. The function responsible for saving old logs in the persistent RAM can be mistakenly called multiple times, which, if conditions are met, can lead to an allocation of the wrong buffer size. If the size of the log buffer increases post-allocation, a subsequent write operation may exceed the allocated memory, resulting in an out-of-bounds memory condition. This flaw can be particularly challenging to exploit due to the specific circumstances required to trigger it, such as the presence of prior crash records that did not fully utilize their allocated buffer size. Affected users should ensure their systems are updated with the latest patches to mitigate this risk.

References