CVE-2026-89985

A flaw was found in the Linux kernel's memory cgroup memcg component. This vulnerability arises when memory pages folios are moved between different memory nodes, causing an inconsistency in how their associated object cgroups objcg are managed. This can lead to memory management operations...

CVE-2026-89985

In the Linux kernel, the following vulnerability has been resolved: memcg: keep folio's objcg same as its node memcgreparentobjcgs has an inherent assumption that a folio's objcg is the objcg of the folio's node. Folio migration across nodes breaks that assumption: the new folio simply inherits t...

CVE-2023-53401

In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in objstockflushrequired KCSAN found an issue in objstockflushrequired: stock-cachedobjcg can be reset between the check and dereference:...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect handling of the stock-cachedobjcg pointer in the objstockflushrequired function, which could...

GSD-2022-1000530 mm: memcg: synchronize objcg lists with a dedicated spinlock

mm: memcg: synchronize objcg lists with a dedicated spinlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

GSD-2022-1000444 mm: memcg: synchronize objcg lists with a dedicated spinlock

mm: memcg: synchronize objcg lists with a dedicated spinlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000383 mm: memcg: synchronize objcg lists with a dedicated spinlock

mm: memcg: synchronize objcg lists with a dedicated spinlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

PT-2022-28804

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to the mm: memcg: synchronize objcg lists with a dedicated spinlock. It was introduced in version v5.9 and fixed in Linux Kernel version v5.16.10. The actual impact and...

PT-2022-28718

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description A synchronization issue exists in the memory control group memcg related to objcg lists, which could potentially lead to security vulnerabilities. The issue was introduced in version v5.9 and...