PT-2026-39065 · Linux · Linux Kernel
Alistair Popple
·
Published
2026-05-08
·
Updated
2026-05-15
·
CVE-2026-43404
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A livelock or starvation issue exists in the
hmm range fault() function. When hmm range fault() fails a folio trylock() call within do swap page() while attempting to acquire the lock of a device-private folio for migration to RAM, the function spins until the lock is acquired. If the process holding the lock depends on a work item scheduled on the same CPU as the spinning hmm range fault(), the work item may be starved, leading to a permanent livelock. This scenario can occur if the lock-holding process is stuck in migrate device unmap() calling lru add drain all(), as the latter requires a short work item to run on all online CPUs to complete.Recommendations
Wait for the folio to be unlocked if
folio trylock() fails in do swap page().Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel