CVE-2026-97952 Linux CVE debrief

Who should care

Linux kernel developers and administrators responsible for maintaining systems with the sunvdc module should assess exposure and apply the patch to prevent potential memory exhaustion and disk failures. They should also review the system's Linux kernel version and update if necessary.

Why it matters

A memory leak vulnerability in the Linux kernel's sunvdc module can cause memory exhaustion, leading to disk failures and potential data loss. Linux kernel developers and administrators should assess exposure and apply the patch.

• Memory exhaustion leading to disk failure
• Potential data loss due to disk failure
• Increased risk of system crashes
• Need for patch application and system updates

Technical summary

The __send_request() function in the Linux kernel's sunvdc module maps request pages into the LDC channel's map table but fails to unmap them when the descriptor send fails. This leads to a permanent memory leak, causing the map table to drain and potentially resulting in disk failure. The vulnerability can cause memory exhaustion, leading to disk failures and potential data loss. Linux kernel developers and administrators should assess exposure and apply the patch to prevent potential memory exhaustion and disk failures.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the patch to the Linux kernel's sunvdc module
• Monitor for potential disk failures due to memory exhaustion
• Verify the system's Linux kernel version and update if necessary
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability was resolved by rolling back on failure: unmapping the cookies, marking the descriptor FREE again, and clearing the request entry. The issue is exacerbated by a previous commit that causes trigger failures under load. Linux kernel developers should verify the system's Linux kernel version and review the patch notes for sunvdc module updates.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.