CVE-2026-89566

CVE CVE-2026-89566EUVD EUVD-2026-76477Published 2026-09-11T19:44:36.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy checkpoint buffers journal_shrink_one_cp_list() skips busy checkpoint buffers when called with JBD2_SHRINK_BUSY_SKIP. The continue statement on this path also skips the need_resched() check at the end of the loop body. Consequently, when a checkpoint list contains mostly busy buffers, the shrinker can walk the entire list while holding journal->j_list_lock, even when a reschedule has been requested. Large checkpoint lists under memory pressure can therefore cause long lock hold times and leave other CPUs spinning on j_list_lock, resulting in soft lockups or RCU stalls. Route the busy-buffer path through the need_resched() check so that the shrinker can release j_list_lock and reschedule promptly, restoring parity with the clean-buffer path, which already checks need_resched(). This does not change which checkpoint buffers are eligible for removal.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux 5fda50e262e65bd553ff777c4b280afd1495a18b; patch: 6.18.50; 6.5; b98dba273a0e47dbfade89c9af73c5b012a4eabb <f213e12ff5c9590b1034ae8da0e6d09665c772d0; 557fda9ed70ebf8eda2620ba3d746215285a1303; patch: 7.3-rc1; patch: 0; b98dba273a0e47dbfade89c9af73c5b012a4eabb <595cac7f1b32d009b97f83dd2b2d6a1a445e9bb4; 5.15.129 <5.16; 6.1.50 <6.2; patch: 7.2.4; b98dba273a0e47dbfade89c9af73c5b012a4eabb <f83c23286e54180cdc83a36463a60003534cc290; 6.4.13 <6.5; b98dba273a0e47dbfade89c9af73c5b012a4eabb <f9182a85991a0ad5cd2940df6db75f40ad90028c; patch: 6.12.109; 9c31bb2684f8035beca0275349d19d679b679ffb

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.