CVE-2026-89985

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the memory control group (memcg) implementation where the memcg reparent objcgs() function assumes a folio's object control group (objcg) is the same as its node. When a folio migrates across nodes, it inherits the old objcg, breaking this assumption and causing the reparenting of the objcg and the Least Recently Used (LRU) list to become non-atomic. Consequently, LRU operations may resolve the lruvec through the objcg and acquire the lru lock of the incorrect memcg instead of the lock for the list the folio currently occupies. This is addressed by selecting the objcg via folio nid() during charge time and re-deriving it for the destination node within the mem cgroup migrate() and mem cgroup replace folio() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.