PT-2026-90473

CVE-2026-89757

·

Published

2026-09-11

·

Updated

2026-11-10

Description by

CVSS 4.0
5.8
Medium
MetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the sort folio() function within the multi-generational least recently used (MGLRU) mechanism. The function contains a buggy shortcut for handling folios that are no longer evictable but remain on a generation list. This shortcut fails to follow the PG lru usage convention and does not properly initialize the mlock count, which can lead to the mlock count aliasing LIST POISON2. Consequently, during a munlock operation, the munlock folio() function may fail to clear the PG mlocked flag, causing the folio to remain unevictable and inflating Mlocked accounting. Additionally, the shortcut modifies LRU flags in an incorrect order by calling lru gen del folio() while PG lru is still set, potentially allowing concurrent operations like folio isolate lru() or compaction to succeed on a folio already removed from the generation list.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-100605
OPENSUSE-SU-2026:11880-1
OPENSUSE-SU-2026:22266-1
SUSE-SU-2026:24643-1
SUSE-SU-2026:24648-1
SUSE-SU-2026:24651-1
SUSE-SU-2026:24662-1
USN-8959-1
USN-8960-1
USN-9019-1
USN-9020-1
USN-9021-1
Found an issue in the description? Have something to add? Feel free to write us 👾