In the Linux kernel, the following vulnerability has been resolved:
mm: don't spin in add_stack_record when gfp flags don't allow
syzbot was able to find the following path: add_stack_record_to_list mm/page_owner.c:182 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x2c3/0x4a0 mm/page_owner.c:333 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851 prep_new_page mm/page_alloc.c:1859 [inline] get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858 alloc_pages_nolock_noprof+0x94/0x120 mm/page_alloc.c:7554
Don't spin in add_stack_record_to_list() when it is called from *_nolock() context.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-awsUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-oracle-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-gcp-6.17Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-generic-6.17Upgrade linux-image-azureUpgrade linux-image-azure-6.17Upgrade linux-image-aws-64kUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-gcp-64k-6.17 | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub