In the Linux kernel, the following vulnerability has been resolved:
memcg: fix soft lockup in the OOM process
A soft lockup issue was found in the product with about 56,000 tasks were in the OOM cgroup, it was traversing them when the soft lockup was triggered.
watchdog: BUG: soft lockup - CPU#2 stuck for 23s! [VM Thread:1503066] CPU: 2 PID: 1503066 Comm: VM Thread Kdump: loaded Tainted: G Hardware name: Huawei Cloud OpenStack Nova, BIOS RIP: 0010:console_unlock+0x343/0x540 RSP: 0000:ffffb751447db9a0 EFLAGS: 00000247 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000ffffffff RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000247 RBP: ffffffffafc71f90 R08: 0000000000000000 R09: 0000000000000040 R10: 0000000000000080 R11: 0000000000000000 R12: ffffffffafc74bd0 R13: ffffffffaf60a220 R14: 0000000000000247 R15: 0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2fe6ad91f0 CR3: 00000004b2076003 CR4: 0000000000360ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vprintk_emit+0x193/0x280 printk+0x52/0x6e dump_task+0x114/0x130 mem_cgroup_scan_tasks+0x76/0x100 dump_header+0x1fe/0x210 oom_kill_process+0xd1/0x100 out_of_memory+0x125/0x570 mem_cgroup_out_of_memory+0xb5/0xd0 try_charge+0x720/0x770 mem_cgroup_try_charge+0x86/0x180 mem_cgroup_try_charge_delay+0x1c/0x40 do_anonymous_page+0xb5/0x390 handle_mm_fault+0xc4/0x1f0
This is because thousands of processes are in the OOM cgroup, it takes a long time to traverse all of them. As a result, this lead to soft lockup in the OOM process.
To fix this issue, call 'cond_resched' in the 'mem_cgroup_scan_tasks' function per 1000 iterations. For global OOM, call 'touch_softlockup_watchdog' per 1000 iterations to avoid this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.235-227.919Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headers | Apr 17, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | May 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 1, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extra | Feb 5, 2026 | Nov 27, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-gke-6.8 | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub