CVE-2026-53153

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the memcg reparent list lrus() function where the xarray entry of a dying memory control group (memcg) is cleared using xas store(&xas, NULL) before its per-node lists are reparented. This sequence creates a race condition where a concurrent list lru del() operation may fail to find the entry via xa load(), proceed to the parent memcg in lock list lru of memcg(), and execute list del init() on an item still linked to the dying memcg's list. If another thread simultaneously holds the dying memcg's per-node lock—such as during another list lru del() or a list lru walk one() isolate callback—both threads may modify the ->next and ->prev pointers of the same physical list using different locks, leading to the corruption of adjacent items' links.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.