Memory Management Vulnerability in Linux Kernel Affecting Resource Management

CVE-2026-98414

What is CVE-2026-98414?

This vulnerability in the Linux kernel concerns memory management, specifically the handling of control groups (cgroups). A flaw in the obj_cgroup_charge_pages() function allows for inappropriate charging of the root memory control group when reparenting occurs. As a result, pages are charged asymmetrically, leading to a leak in memory counter for the root cgroup, despite the memory being not user-visible. This issue can potentially escalate resource allocation misuse, impacting system stability and performance. A patch has been applied to ensure that the charge functions correctly respect the root cgroup's constraints, thus restoring balance in memory resource management.

References