CVE-2026-89567jbd2: bound shrinker scans by examined checkpoint buffers
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: jbd2: bound shrinker scans by examined checkpoint buffers The jbd2 shrinker currently accounts only checkpoint buffers that it successfully releases against nr_to_scan. Busy buffers therefore do not consume the scan budget. If a checkpoint transaction contains mostly busy buffers, the shrinker can scan its entire checkpoint list while holding journal->j_list_lock. Large checkpoint lists can result in excessive lock hold times and leave other CPUs spinning on j_list_lock, causing soft lockups or RCU stalls. Pass nr_to_scan into journal_shrink_one_cp_list() and decrement it for every buffer examined, including busy buffers. Pass NULL from checkpoint cleanup paths so their existing full-list behavior is preserved. This restores the scan-budget semantics that existed before journal_shrink_one_cp_list() was changed to always scan a complete checkpoint list.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b98dba273a0e47dbfade89c9af73c5b012a4eabb before edf5fcd0469b7467bd5b37a79502c8d9c3257dbb; from b98dba273a0e47dbfade89c9af73c5b012a4eabb before 71c6b872c746465fa4b5def239cb296173ca8216; from b98dba273a0e47dbfade89c9af73c5b012a4eabb before c2c0fb364685b8996c357d3b050394959b29d6e0; from b98dba273a0e47dbfade89c9af73c5b012a4eabb before 15cb16496446b94e67f7abcb049b8e2c75cd3d02; 9c31bb2684f8035beca0275349d19d679b679ffb; 5fda50e262e65bd553ff777c4b280afd1495a18b; 557fda9ed70ebf8eda2620ba3d746215285a1303; from 5.15.129 before 5.16; and 2 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/edf5fcd0469b7467bd5b37a79502c8d9c3257dbb
- https://git.kernel.org/stable/c/71c6b872c746465fa4b5def239cb296173ca8216
- https://git.kernel.org/stable/c/c2c0fb364685b8996c357d3b050394959b29d6e0
- https://git.kernel.org/stable/c/15cb16496446b94e67f7abcb049b8e2c75cd3d02
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.