mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() (CVE-2026-89753) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-89753

mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()

Answer in brief

CVE-2026-89753 records a Unknown severity vulnerability in mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 11, 2026Updated Sep 11, 2026Source checked Sep 11, 2026First seen by HOL Sep 11, 2026Material review Sep 11, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 1 mapped package or product
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <b5391676c61d94ffe3272dcf6723738b802f79e8 \|\| >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <3fd50239986302cb050d3649351bcec00fa9d5ab \|\| >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <cf3ba0911a1cf8680371ff113b90088edd01d2bb \|\| >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <25f52e81216884a7444bf07a606691feb09a94e3 \|\| >=0 <6.12.109 \|\| >=0 <6.18.50 \|\| >=0 <7.2.4	b5391676c61d94ffe3272dcf6723738b802f79e8, 3fd50239986302cb050d3649351bcec00fa9d5ab, cf3ba0911a1cf8680371ff113b90088edd01d2bb, 25f52e81216884a7444bf07a606691feb09a94e3, 6.12.109, 6.18.50, 7.2.4

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux.
Review the reported fix. Update Linux/Linux to b5391676c61d94ffe3272dcf6723738b802f79e8 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 11, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() I am seeing some rcu_tasks stalls in the Meta fleet during reclaim. INFO: rcu_tasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idle_cpu: -1/8 task:GlobalCPUThread state:R running task pid:2552016 tgid:2524552 Call Trace: shrink_lruvec mem_cgroup_iter shrink_node do_try_to_free_pages try_to_free_pages __alloc_frozen_pages_noprof alloc_pages_noprof pte_alloc_one __pte_alloc handle_mm_fault Nothing promises direct reclaim returns in bounded time, and the scan loop in shrink_lruvec() only calls cond_resched(), which is a no-op on PREEMPTION kernels. Involuntary preemption is not a Tasks-RCU quiescent state, so the reclaiming task never reports one and becomes a holdout. Upgrade it to cond_resched_tasks_rcu_qs(), which reports a quiescent state even when cond_resched() does nothing. PS: This has been discussed in [1]

Quoted source text, attributed separately from HOL analysis.