CVE-2026-93216

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Time-of-Check to Time-of-Use (TOCTOU) issue exists in the print page owner memcg() function. The function initially reads page->memcg data using READ ONCE() to protect against NULL data and tail pages, but subsequently re-reads page->memcg data without locking in the page memcg check(page) function and the PageMemcgKmem(page) function (via folio memcg kmem()). If a page is freed and reallocated as a slab page or a Transparent Huge Page (THP) tail page between these operations, it can trigger VM BUG ON assertions on builds with CONFIG DEBUG VM=y, resulting in a kernel crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.