In the Linux kernel, the following vulnerability has been resolved:
mm: slub: avoid wake up kswapd in set_track_prepare
set_track_prepare() can incur lock recursion. The issue is that it is called from hrtimer_start_range_ns holding the per_cpu(hrtimer_bases)[n].lock, but when enabled CONFIG_DEBUG_OBJECTS_TIMERS, may wake up kswapd in set_track_prepare, and try to hold the per_cpu(hrtimer_bases)[n].lock.
Avoid deadlock caused by implicitly waking up kswapd by passing in allocation flags, which do not contain __GFP_KSWAPD_RECLAIM in the debug_objects_fill_pool() case. Inside stack depot they are processed by gfp_nested_mask(). Since ___slab_alloc() has preemption disabled, we mask out __GFP_DIRECT_RECLAIM from the flags there.
The oops looks something like:
BUG: spinlock recursion on CPU#3, swapper/3/0 lock: 0xffffff8a4bf29c80, .magic: dead4ead, .owner: swapper/3/0, .owner_cpu: 3 Hardware name: Qualcomm Technologies, Inc. Popsicle based on SM8850 (DT) Call trace: spin_bug+0x0 _raw_spin_lock_irqsave+0x80 hrtimer_try_to_cancel+0x94 task_contending+0x10c enqueue_dl_entity+0x2a4 dl_server_start+0x74 enqueue_task_fair+0x568 enqueue_task+0xac do_activate_task+0x14c ttwu_do_activate+0xcc try_to_wake_up+0x6c8 default_wake_function+0x20 autoremove_wake_function+0x1c __wake_up+0xac wakeup_kswapd+0x19c wake_all_kswapds+0x78 __alloc_pages_slowpath+0x1ac __alloc_pages_noprof+0x298 stack_depot_save_flags+0x6b0 stack_depot_save+0x14 set_track_prepare+0x5c ___slab_alloc+0xccc __kmalloc_cache_noprof+0x470 __set_page_owner+0x2bc post_alloc_hook[jt]+0x1b8 prep_new_page+0x28 get_page_from_freelist+0x1edc __alloc_pages_noprof+0x13c alloc_slab_page+0x244 allocate_slab+0x7c ___slab_alloc+0x8e8 kmem_cache_alloc_noprof+0x450 debug_objects_fill_pool+0x22c debug_object_activate+0x40 enqueue_hrtimer[jt]+0xdc hrtimer_start_range_ns+0x5f8 ...
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade perfUpgrade kernel-develUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-64kUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matched | Dec 2, 2025 | Nov 24, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-develUpgrade bpftool-debuginfoUpgrade kernel6.12-headersUpgrade bpftoolUpgrade perf6.12Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel-livepatch-6.1.153-175.280Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perfUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade kernel-toolsUpgrade bpftool6.12-debuginfoUpgrade kernel-develUpgrade bpftool6.12 | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2025 | Sep 19, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 25, 2025 | Sep 19, 2025 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade libperfUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modules | Jan 19, 2026 | Jan 17, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeopUpgrade linux-image-oracle-6.8Upgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-kvm | Mar 17, 2026 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub