CVE-2026-89986
kernel: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel. An improper memory allocation, referred to as a sleeping allocation, occurs within the alloc_pages_bulk_weighted_interleave() function when a task has an MPOL_WEIGHTED_INTERLEAVE memory policy. This can lead to a kernel crash, resulting in a Denial of Service (DoS) for the system.
Statement
This vulnerability is rated as Low severity because triggering it requires local access and the explicit configuration of non-default NUMA weighted interleave memory policies on running processes. The issue stems from memory allocations invoked during atomic operations, which can destabilize the kernel or trigger a denial of service splat without exposing confidential data or permitting code execution. Earlier enterprise platforms such as RHEL 8 and 9 lack the affected code, restricting exposure to newer environments running customized memory-interleaving workloads.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-663 · Use of a Non-reentrant Function in a Concurrent Context