{"id":"CVE-2026-89753","title":"mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()\n\nI am seeing some rcu_tasks stalls in the Meta fleet during reclaim.\n\n  INFO: rcu_tasks detected stalls …","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-821"],"vendor":"Linux","product":"Linux","affected":["Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 4f50593c9cbc883d8c9b50148a3e8a8b1fd35f57","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 4cdc1bdf40944de5c6b118fef07ad23f07844338","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < a67a00a70a7c8309ca47ea157ef3e8ed3d268f5b","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 029c9408049f7f582230322057b7075bea594fd5","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < b5391676c61d94ffe3272dcf6723738b802f79e8","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 3fd50239986302cb050d3649351bcec00fa9d5ab","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < cf3ba0911a1cf8680371ff113b90088edd01d2bb","Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 25f52e81216884a7444bf07a606691feb09a94e3","Linux 3.18"],"published":"2026-09-11","updated":"2026-10-19","sourceUpdated":"2026-10-19T08:52:06.974Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89753","references":[{"url":"https://git.kernel.org/stable/c/4f50593c9cbc883d8c9b50148a3e8a8b1fd35f57"},{"url":"https://git.kernel.org/stable/c/4cdc1bdf40944de5c6b118fef07ad23f07844338"},{"url":"https://git.kernel.org/stable/c/a67a00a70a7c8309ca47ea157ef3e8ed3d268f5b"},{"url":"https://git.kernel.org/stable/c/029c9408049f7f582230322057b7075bea594fd5"},{"url":"https://git.kernel.org/stable/c/b5391676c61d94ffe3272dcf6723738b802f79e8"},{"url":"https://git.kernel.org/stable/c/3fd50239986302cb050d3649351bcec00fa9d5ab"},{"url":"https://git.kernel.org/stable/c/cf3ba0911a1cf8680371ff113b90088edd01d2bb"},{"url":"https://git.kernel.org/stable/c/25f52e81216884a7444bf07a606691feb09a94e3"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89753.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-89753"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532148"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89753"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89753"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89753.mbox"}],"tags":["cve.org","csaf","vex","red-hat"],"epss":0.00177,"epssPercentile":0.07155,"ingestedAt":"2026-09-14T15:23:07.448Z","slug":"CVE-2026-89753","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()\n\nI am seeing some rcu_tasks stalls in the Meta fleet during reclaim.\n\n  INFO: rcu_tasks detected stalls on tasks:\n\t0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idle_cpu: -1/8\n\ttask:GlobalCPUThread state:R  running task  pid:2552016 tgid:2524552\n  Call Trace:\n   shrink_lruvec\n   mem_cgroup_iter\n   shrink_node\n   do_try_to_free_pages\n   try_to_free_pages\n   __alloc_frozen_pages_noprof\n   alloc_pages_noprof\n   pte_alloc_one\n   __pte_alloc\n   handle_mm_fault\n\nNothing promises direct reclaim returns in bounded time, and the scan loop\nin shrink_lruvec() only calls cond_resched(), which is a no-op on\nPREEMPTION kernels.  Involuntary preemption is not a Tasks-RCU quiescent\nstate, so the reclaiming task never reports one and becomes a holdout.\n\nUpgrade it to cond_resched_tasks_rcu_qs(), which reports a quiescent state\neven when cond_resched() does nothing.\n\nPS: This has been discussed in [1]\n\n## Affected\n\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 4f50593c9cbc883d8c9b50148a3e8a8b1fd35f57`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 4cdc1bdf40944de5c6b118fef07ad23f07844338`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < a67a00a70a7c8309ca47ea157ef3e8ed3d268f5b`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 029c9408049f7f582230322057b7075bea594fd5`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < b5391676c61d94ffe3272dcf6723738b802f79e8`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 3fd50239986302cb050d3649351bcec00fa9d5ab`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < cf3ba0911a1cf8680371ff113b90088edd01d2bb`\n- `Linux >= 8315f42295d2667a7f942f154b73a86fd7cb2227 < 25f52e81216884a7444bf07a606691feb09a94e3`\n- `Linux 3.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-10-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89753.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":205519,"id":"CVE-2026-89753","ts":1789576723146,"field":"cvss","old":"4.7","new":"5.5"},{"seq":204083,"id":"CVE-2026-89753","ts":1789490231364,"field":"cvss","old":null,"new":"4.7"},{"seq":204082,"id":"CVE-2026-89753","ts":1789490231364,"field":"severity","old":"none","new":"medium"},{"seq":147682,"id":"CVE-2026-89753","ts":1789270211865,"field":"cvss","old":null,"new":"4.7"},{"seq":147681,"id":"CVE-2026-89753","ts":1789270211865,"field":"severity","old":"none","new":"medium"},{"seq":109434,"id":"CVE-2026-89753","ts":1789183731900,"field":"cvss","old":null,"new":"4.7"},{"seq":109433,"id":"CVE-2026-89753","ts":1789183731900,"field":"severity","old":"none","new":"medium"}]}