CVE-2026-90046 mm/page_alloc: don't spin_trylock() in NMI on UP

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-90046 mm/page_alloc: don't spin_trylock() in NMI on UP

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-90046

CVE-2026-90046 is a Linux kernel vulnerability in the mm/page_alloc subsystem where free_pages_nolock() uses spin_trylock() in NMI context on UP (uniprocessor) builds, an unsafe usage previously noted in can_spin_trylock(). A prior commit fixed the allocation side but missed the free side. The im...

EUVD-2026-80654

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

CVE-2026-90004

CVE-2026-90004 is a Linux kernel vulnerability in the DAMON (Data Access Monitoring) subsystem (mm/damon/core). The function damon_apply_min_nr_regions() assumes that region splitting (damon_split_region_at()) always succeeds. On a silent memory allocation failure, an invalid pointer can be retur...

CVE-2026-89987

CVE-2026-89987 affects the Linux kernel in the mm/huge_memory subsystem. The function zap_huge_pmd_folio() fails to propagate the PMD dirty bit to the folio when a PMD-mapped shmem/tmpfs page is unmapped, unlike the PTE path and PMD split path. This causes silent data loss for processes that stor...

CVE-2026-89986 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in allocpagesbulkweightedinterleave syzbot reported a sleeping function called from invalid context splat in buckettablealloc. When rhashtableinsertslow rehashes the table under rcureadlock, ...

EUVD-2026-80594

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix sleeping allocation in allocpagesbulkweightedinterleave syzbot reported a sleeping function called from invalid context splat in buckettablealloc. When rhashtableinsertslow rehashes the table under rcureadlock, ...

CVE-2026-89967

CVE-2026-89967 is an out-of-bounds write in the Linux kernel 's mm/migrate_device subsystem. The functions migrate_device_range() and migrate_device_pfns() clear entries following a compound folio to maintain page-granular PFN arrays, but fail to limit writes to the number of slots remaining in t...

CVE-2026-89967 mm/migrate_device: avoid out-of-bounds writes for compound folios

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that the PFN arrays retain their page-granular representation. If a compoun...

EUVD-2026-80567

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that the PFN arrays retain their page-granular representation. If a compoun...

CVE-2026-89961 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addrpfn tracking in compound vmemmap population vmemmappopulatecompoundpages uses addrpfn to determine the PFN offset within a compound page and to decide whether the current vmemmap slot should be populated...

EUVD-2026-80561

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addrpfn tracking in compound vmemmap population vmemmappopulatecompoundpages uses addrpfn to determine the PFN offset within a compound page and to decide whether the current vmemmap slot should be populated...

CVE-2026-89961

CVE-2026-89961 affects the Linux kernel 's powerpc/mm subsystem, specifically the vmemmap_populate_compound_pages() function. The root cause is a mismatch in how addr_pfn is advanced relative to the loop's addr variable in vmemmap address space. Because each PAGE_SIZE step in addr spans PAGE_SIZE...

CVE-2026-89961 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addrpfn tracking in compound vmemmap population vmemmappopulatecompoundpages uses addrpfn to determine the PFN offset within a compound page and to decide whether the current vmemmap slot should be populated...

Linux Distros Unpatched Vulnerability : CVE-2026-89967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that t...

Linux Distros Unpatched Vulnerability : CVE-2026-90046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pagealloc: don't spintrylock in NMI on UP Patch series mm/pagealloc: fixes for freepagesnolock on RT/UP. Pre-existing bugs found by Sashiko during review of...

CVE-2026-89961: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: fix wrong addrpfn tracking in compound vmemmap population vmemmappopulatecompoundpages uses addrpfn to determine the PFN offset within a compound page and to decide whether the current vmemmap slot should be populated...

CVE-2026-89966: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlbcma: fix null nodemask dereference in hugetlbcmaallocfrozenfolio allocbuddyhugetlbfoliowithmpol can pass a NULL nodemask to allocfreshhugetlbfolio as a fallback to allocate from all nodes. If order is gigantic,...

CVE-2026-89967: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: avoid out-of-bounds writes for compound folios migratedevicerange and migratedevicepfns clear the entries following a compound folio so that the PFN arrays retain their page-granular representation. If a compoun...