PT-2026-94737 · Linux · Linux Kernel

CVE-2026-90389

·

Published

2026-09-17

·

Updated

2026-09-28

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists where storing a memalloc noio save() token in mddev->noio flags allows one task to save the token and another to restore it. During concurrent suspend sysfs writes, a task can enter PF MEMALLOC NOIO (a flag that prevents the process from triggering direct reclaim or swapping during memory allocation), return to userspace while remaining in that scope, and subsequently have its saved token restored by a different task.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-102111
CVE-2026-90389
OPENSUSE-SU-2026:11893-1

Affected Products

Linux Kernel