{
  "cveId": "CVE-2026-89985",
  "url": "https://patchblox.com/security/cve/CVE-2026-89985",
  "summary": "CVE-2026-89985 is fixed in linux on 1 platform by DEBIAN-CVE-2026-89985 (version 7.2.6-1), released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  memcg: keep folio\u0027s objcg same as its node  memc...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  memcg: keep folio\u0027s objcg same as its node  memcg_reparent_objcgs() has an inherent assumption that a folio\u0027s objcg is the objcg of the folio\u0027s node.  Folio migration across nodes breaks that assumption: the new folio simply inherits the old folio\u0027s objcg while living on a different node.  Once the assumption is broken, the reparenting of the folio\u0027s objcg and the reparenting of the folio\u0027s LRU list are no longer atomic.  memcg_reparent_objcgs() handles one node per iteration and drops all the locks in between, so the objcg gets reparented in the iteration for the objcg\u0027s node while the LRU list gets spliced in the iteration for the folio\u0027s node.  Any LRU operation on that folio in between resolves its lruvec through the objcg, and thus takes the lru_lock of the wrong memcg, not the lru_lock of the list the folio is actually on.  Fix this by selecting the objcg by folio_nid() at charge time, and by re-deriving it for the destination node in mem_cgroup_migrate() and mem_cgroup_replace_folio().",
  "published": "2026-09-16T11:17:09Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00165,
  "epssPercentile": 0.0576,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-89985",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89985",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}