CVE-2026-89759

CVE-2026-89759 affects the Linux kernel's mm/kmemleak subsystem. The root cause is that kmemleak_scan() walks every task stack under a single rcu_read_lock() with no reschedule point; on hosts with a very large number of threads (amplified by KASAN/lockdep in debug builds), the loop can hog a CPU...

CVE-2026-89759 mm/kmemleak: avoid soft lockup when scanning task stacks

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup when scanning task stacks Patch series "mm/kmemleak: avoid soft lockup when scanning task", v3. kmemleakscan scans every task stack under one rcureadlock with no reschedule point, which can trip the...