CVE-2026-89566jbd2: check need_resched() when skipping busy checkpoint buffers
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy checkpoint buffers journal_shrink_one_cp_list() skips busy checkpoint buffers when called with JBD2_SHRINK_BUSY_SKIP. The continue statement on this path also skips the need_resched() check at the end of the loop body. Consequently, when a checkpoint list contains mostly busy buffers, the shrinker can walk the entire list while holding journal->j_list_lock, even when a reschedule has been requested. Large checkpoint lists under memory pressure can therefore cause long lock hold times and leave other CPUs spinning on j_list_lock, resulting in soft lockups or RCU stalls. Route the busy-buffer path through the need_resched() check so that the shrinker can release j_list_lock and reschedule promptly, restoring parity with the clean-buffer path, which already checks need_resched(). This does not change which checkpoint buffers are eligible for removal.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b98dba273a0e47dbfade89c9af73c5b012a4eabb before f83c23286e54180cdc83a36463a60003534cc290; from b98dba273a0e47dbfade89c9af73c5b012a4eabb before f9182a85991a0ad5cd2940df6db75f40ad90028c; from b98dba273a0e47dbfade89c9af73c5b012a4eabb before 595cac7f1b32d009b97f83dd2b2d6a1a445e9bb4; from b98dba273a0e47dbfade89c9af73c5b012a4eabb before f213e12ff5c9590b1034ae8da0e6d09665c772d0; 9c31bb2684f8035beca0275349d19d679b679ffb; 5fda50e262e65bd553ff777c4b280afd1495a18b; 557fda9ed70ebf8eda2620ba3d746215285a1303; from 5.15.129 before 5.16; and 2 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/f83c23286e54180cdc83a36463a60003534cc290
- https://git.kernel.org/stable/c/f9182a85991a0ad5cd2940df6db75f40ad90028c
- https://git.kernel.org/stable/c/595cac7f1b32d009b97f83dd2b2d6a1a445e9bb4
- https://git.kernel.org/stable/c/f213e12ff5c9590b1034ae8da0e6d09665c772d0
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.