{"cve":"CVE-2026-89753","nvd":{"published":"2026-09-11T20:20:06.270","modified":"2026-10-19T09:18:18.343","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()\n\nI am seeing some rcu_tasks stalls in the Meta fleet during reclaim.\n\n  INFO: rcu_tasks detected stalls on tasks:\n\t0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idle_cpu: -1/8\n\ttask:GlobalCPUThread state:R  running task  pid:2552016 tgid:2524552\n  Call Trace:\n   shrink_lruvec\n   mem_cgroup_iter\n   shrink_node\n   do_try_to_free_pages\n   try_to_free_pages\n   __alloc_frozen_pages_noprof\n   alloc_pages_noprof\n   pte_alloc_one\n   __pte_alloc\n   handle_mm_fault\n\nNothing promises direct reclaim returns in bounded time, and the scan loop\nin shrink_lruvec() only calls cond_resched(), which is a no-op on\nPREEMPTION kernels.  Involuntary preemption is not a Tasks-RCU quiescent\nstate, so the reclaiming task never reports one and becomes a holdout.\n\nUpgrade it to cond_resched_tasks_rcu_qs(), which reports a quiescent state\neven when cond_resched() does nothing.\n\nPS: This has been discussed in [1]","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/029c9408049f7f582230322057b7075bea594fd5","https://git.kernel.org/stable/c/25f52e81216884a7444bf07a606691feb09a94e3","https://git.kernel.org/stable/c/3fd50239986302cb050d3649351bcec00fa9d5ab","https://git.kernel.org/stable/c/4cdc1bdf40944de5c6b118fef07ad23f07844338","https://git.kernel.org/stable/c/4f50593c9cbc883d8c9b50148a3e8a8b1fd35f57"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:53:43.293028046+00:00"},"epss":{"cve":"CVE-2026-89753","score":0.00177,"percentile":0.07173,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}