CVE-2026-64418

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the memory management shrinker component. The expand shrinker info() function iterates through visible memory control groups (memcgs) using the shrinker mutex. However, the alloc shrinker info() function may drop the shrinker mutex before freeing a partially initialized shrinker info array. This allows a race where expand one shrinker info() can access the shrinker info while it is being freed by free shrinker info(), potentially leading to a use-after-free or double-free scenario. A similar issue occurs in mem cgroup css online() when an objcg allocation fails, causing the free objcg to free shrinker info() path to tear down published arrays without the shrinker mutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.