Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-89753— mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于mm/vmscan的shrink_lruvec()函数扫描循环仅调用cond_resched()，在PREEMPTION内核上不起作用，回收任务无法报告RCU-tasks静默状态，可能导致RCU-tasks停顿。

AI Predicted 5.5 Difficulty: Hard EPSS 0.18% · P7

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 8315f42295d2667a7f942f154b73a86fd7cb2227< 4f50593c9cbc883d8c9b50148a3e8a8b1fd35f57 affected
8315f42295d2667a7f942f154b73a86fd7cb2227< 4cdc1bdf40944de5c6b118fef07ad23f07844338 affected
8315f42295d2667a7f942f154b73a86fd7cb2227< a67a00a70a7c8309ca47ea157ef3e8ed3d268f5b affected
8315f42295d2667a7f942f154b73a86fd7cb2227< 029c9408049f7f582230322057b7075bea594fd5 affected
8315f42295d2667a7f942f154b73a86fd7cb2227< b5391676c61d94ffe3272dcf6723738b802f79e8 affected
8315f42295d2667a7f942f154b73a86fd7cb2227< 3fd50239986302cb050d3649351bcec00fa9d5ab affected
8315f42295d2667a7f942f154b73a86fd7cb2227< cf3ba0911a1cf8680371ff113b90088edd01d2bb affected
8315f42295d2667a7f942f154b73a86fd7cb2227< 25f52e81216884a7444bf07a606691feb09a94e3 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-89753

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() I am seeing some rcu_tasks stalls in the Meta fleet during reclaim. INFO: rcu_tasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idle_cpu: -1/8 task:GlobalCPUThread state:R running task pid:2552016 tgid:2524552 Call Trace: shrink_lruvec mem_cgroup_iter shrink_node do_try_to_free_pages try_to_free_pages __alloc_frozen_pages_noprof alloc_pages_noprof pte_alloc_one __pte_alloc handle_mm_fault Nothing promises direct reclaim returns in bounded time, and the scan loop in shrink_lruvec() only calls cond_resched(), which is a no-op on PREEMPTION kernels. Involuntary preemption is not a Tasks-RCU quiescent state, so the reclaiming task never reports one and becomes a holdout. Upgrade it to cond_resched_tasks_rcu_qs(), which reports a quiescent state even when cond_resched() does nothing. PS: This has been discussed in [1]
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于mm/vmscan的shrink_lruvec()函数扫描循环仅调用cond_resched()，在PREEMPTION内核上不起作用，回收任务无法报告RCU-tasks静默状态，可能导致RCU-tasks停顿。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 8315f42295d2667a7f942f154b73a86fd7cb2227 ~ 4f50593c9cbc883d8c9b50148a3e8a8b1fd35f57 -
Linux Linux 3.18 -

II. Public POCs for CVE-2026-89753

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-89753

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-89753 (7)

Same Patch Batch · Linux · 2026-09-11 · 431 CVEs total

CVE-2026-89669 9.8 CRITICAL nfsd: initialize copy-notify stateid before publishing it
CVE-2026-89536 9.8 CRITICAL SUNRPC: wait for in-flight client TLS handshake callback
CVE-2026-89533 9.8 CRITICAL svcrdma: Fix offset arithmetic in read_chunk_range
CVE-2026-81002 9.8 CRITICAL xdp: fix zero-copy frame layout
CVE-2026-89643 9.8 CRITICAL audit: avoid dropping live tree ref on fsnotify rule autoremove
CVE-2026-89526 9.8 CRITICAL svcrdma: Validate Read chunk positions before reconstruction
CVE-2026-89652 9.8 CRITICAL ceph: bound copied dentry name length in NFS export get_name
CVE-2026-89651 9.8 CRITICAL ceph: bound MDSCapAuth path and fs_name decode in handle_session()
CVE-2026-89653 9.8 CRITICAL ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
CVE-2026-89654 9.8 CRITICAL ceph: fix UAF in check_new_map() on session freed during unlock
CVE-2026-89656 9.8 CRITICAL libceph: reject buckets with mismatched CRUSH ids
CVE-2026-89655 9.8 CRITICAL ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
CVE-2026-89712 9.8 CRITICAL NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
CVE-2026-89658 9.8 CRITICAL NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
CVE-2026-89660 9.8 CRITICAL NFSD: Prevent client use-after-free during admin state revocation
CVE-2026-89659 9.8 CRITICAL NFSD: Prevent client use-after-free during delegation revoke
CVE-2026-89708 9.8 CRITICAL nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
CVE-2026-89662 9.8 CRITICAL NFSD: Prevent lock owner use-after-free during client teardown
CVE-2026-89689 9.8 CRITICAL nfsd: don't free session slots that are still in use
CVE-2026-89686 9.8 CRITICAL nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke

Showing top 20 of 431 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-89753

No comments yet

Leave a comment