CVE Database›Document archive›CVE-2026-89986

CVE-2026-89986

kernel: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 16, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel. An improper memory allocation, referred to as a sleeping allocation, occurs within the alloc_pages_bulk_weighted_interleave() function when a task has an MPOL_WEIGHTED_INTERLEAVE memory policy. This can lead to a kernel crash, resulting in a Denial of Service (DoS) for the system.

Statement

This vulnerability is rated as Low severity because triggering it requires local access and the explicit configuration of non-default NUMA weighted interleave memory policies on running processes. The issue stems from memory allocations invoked during atomic operations, which can destabilize the kernel or trigger a denial of service splat without exposing confidential data or permitting code execution. Earlier enterprise platforms such as RHEL 8 and 9 lack the affected code, restricting exposure to newer environments running customized memory-interleaving workloads.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-663 · Use of a Non-reentrant Function in a Concurrent Context