Linux Kernel Vulnerability in Debugfs Lockdown Check for mmap_prepare Operation

CVE-2026-89745

What is CVE-2026-89745?

A vulnerability in the Linux Kernel affects the debugfs component where the lockdown check for the mmap_prepare operation was not properly implemented. This oversight allows for potential unauthorized access to files in relayfs when the kernel is in integrity mode, as the system does not correctly enforce lockdown rules for files utilizing mmap_prepare. The kernel has been updated to ensure that both mmap and mmap_prepare operations are considered during lockdown checks, addressing this security gap and enhancing system integrity.

References