Search

CVE-2026-89757 - mm/mglru: fix and remove redundant unevictable folio handling

CVE ID : CVE-2026-89757 Published : Sept. 11, 2026, 8:20 p. m. • 32 minutes ago Description : In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevictable folio handling sort_folio() has a shortcut for moving folios that are no longer evictable but are still sitting on a generation list. However, this shortcut is buggy. It does not follow the PG_lru usage convention, and it has a more serious issue. Unevictable folios are not threaded on lists[LRU_UNEVICTABLE], so that folio-lru can be reused to hold folio-mlock_count (see the comment in lruvec_init()). Hence lruvec_add_folio() skips the list_add() for them, and every other place that turns a folio unevictable initialises mlock_count explicitly: lru_add() sets it to 0, __mlock_folio() and __mlock_new_folio() set it to !! folio_test_mlocked(folio).