Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup… (CVE-2026-64415)
A vulnerability in the Linux kernel's memory management swap reclaim function could cause a softlockup under heavy load conditions. This issue was observed during stress testing on a large arm64 system with extensive memory and swap usage. The problem was addressed by adding periodic scheduler rescheduling calls (cond_resched()) during swap reclaim operations to prevent the system from becoming unresponsive.
AI Analysis
Technical Summary
The Linux kernel had a vulnerability in the swap reclaim code path (swap_reclaim_full_clusters) where lack of periodic rescheduling calls could cause a softlockup under heavy memory and swap stress. This was discovered during internal stress testing on a large 320-CPU arm64 machine with about 1TB memory and an 8.6GB swap device. The fix involved adding cond_resched() calls during large full cluster reclaim operations to allow the kernel scheduler to run other tasks and avoid softlockup conditions. The vulnerability is identified as CVE-2026-64415.
Potential Impact
Under heavy memory and swap stress, systems running the affected Linux kernel could experience softlockups, causing the kernel worker threads to become unresponsive and potentially leading to system instability or hangs. This impacts system availability but does not indicate direct compromise or data loss.
Mitigation Recommendations
A fix has been implemented in the Linux kernel by adding cond_resched() calls in the swap reclaim code to prevent softlockups. Users should apply the updated kernel version containing this fix. Since no specific patch versions are provided, check the vendor or distribution advisories for the official fixed kernel releases and update accordingly.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup… (CVE-2026-64415)
Description
A vulnerability in the Linux kernel's memory management swap reclaim function could cause a softlockup under heavy load conditions. This issue was observed during stress testing on a large arm64 system with extensive memory and swap usage. The problem was addressed by adding periodic scheduler rescheduling calls (cond_resched()) during swap reclaim operations to prevent the system from becoming unresponsive.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel had a vulnerability in the swap reclaim code path (swap_reclaim_full_clusters) where lack of periodic rescheduling calls could cause a softlockup under heavy memory and swap stress. This was discovered during internal stress testing on a large 320-CPU arm64 machine with about 1TB memory and an 8.6GB swap device. The fix involved adding cond_resched() calls during large full cluster reclaim operations to allow the kernel scheduler to run other tasks and avoid softlockup conditions. The vulnerability is identified as CVE-2026-64415.
Potential Impact
Under heavy memory and swap stress, systems running the affected Linux kernel could experience softlockups, causing the kernel worker threads to become unresponsive and potentially leading to system instability or hangs. This impacts system availability but does not indicate direct compromise or data loss.
Mitigation Recommendations
A fix has been implemented in the Linux kernel by adding cond_resched() calls in the swap reclaim code to prevent softlockups. Users should apply the updated kernel version containing this fix. Since no specific patch versions are provided, check the vendor or distribution advisories for the official fixed kernel releases and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-f2f9-54cv-v7gf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64415"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420a9c2644c7f8084168
Added to database: 07/25/2026, 23:08:58 UTC
Last enriched: 08/15/2026, 02:42:58 UTC
Last updated: 09/07/2026, 10:52:10 UTC
Views: 81
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.