PT-2026-90473
CVE-2026-89757
·
Published
2026-09-11
·
Updated
2026-11-10
Description by
CVSS 4.0
5.8
MediumMetricsAV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the
sort folio() function within the multi-generational least recently used (MGLRU) mechanism. The function contains a buggy shortcut for handling folios that are no longer evictable but remain on a generation list. This shortcut fails to follow the PG lru usage convention and does not properly initialize the mlock count, which can lead to the mlock count aliasing LIST POISON2. Consequently, during a munlock operation, the munlock folio() function may fail to clear the PG mlocked flag, causing the folio to remain unevictable and inflating Mlocked accounting. Additionally, the shortcut modifies LRU flags in an incorrect order by calling lru gen del folio() while PG lru is still set, potentially allowing concurrent operations like folio isolate lru() or compaction to succeed on a folio already removed from the generation list.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾