CVE-2026-89566

Not scored yetLast modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

jbd2: check need_resched() when skipping busy checkpoint buffers

journal_shrink_one_cp_list() skips busy checkpoint buffers when called with JBD2_SHRINK_BUSY_SKIP. The continue statement on this path also skips the need_resched() check at the end of the loop body.

Consequently, when a checkpoint list contains mostly busy buffers, the shrinker can walk the entire list while holding journal->j_list_lock, even when a reschedule has been requested. Large checkpoint lists under memory pressure can therefore cause long lock hold times and leave other CPUs spinning on j_list_lock, resulting in soft lockups or RCU stalls.

Route the busy-buffer path through the need_resched() check so that the shrinker can release j_list_lock and reschedule promptly, restoring parity with the clean-buffer path, which already checks need_resched(). This does not change which checkpoint buffers are eligible for removal.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b98dba273a0e47dbfade89c9af73c5b012a4eabb, < dc7ece0b827fe3b748db685fb85cd2fc3710c3f9; >= b98dba273a0e47dbfade89c9af73c5b012a4eabb, < f83c23286e54180cdc83a36463a60003534cc290; >= b98dba273a0e47dbfade89c9af73c5b012a4eabb, < f9182a85991a0ad5cd2940df6db75f40ad90028c; >= b98dba273a0e47dbfade89c9af73c5b012a4eabb, < 595cac7f1b32d009b97f83dd2b2d6a1a445e9bb4; >= b98dba273a0e47dbfade89c9af73c5b012a4eabb, < f213e12ff5c9590b1034ae8da0e6d09665c772d0; 9c31bb2684f8035beca0275349d19d679b679ffb; 5fda50e262e65bd553ff777c4b280afd1495a18b; 557fda9ed70ebf8eda2620ba3d746215285a1303; >= 5.15.129, < 5.16; >= 6.1.50, < 6.2; >= 6.4.13, < 6.5
LinuxLinux6.5

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 21, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-89567In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrCVE-2026-89568In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho_preserved_memory_reserve() kho_preserCVE-2026-895698.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: serialize security confirmation handling rfcomm_secCVE-2026-89578.8Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151,CVE-2026-895707.8In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetiCVE-2026-895717.1In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctl_cmCVE-2026-89572In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() addCVE-2026-895737.8In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's aCVE-2026-895747.8In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read array_block_check() valCVE-2026-89575In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in build_constructor_string(CVE-2026-89576In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadata_takCVE-2026-89577In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLK_STS
CVE-2026-89566: Unscored | Vulnix