{"id":"CVE-2026-93240","revision":"d1fd395874ce43178fd2c3a909e3641c","records":[{"revision":"d1fd395874ce43178fd2c3a909e3641c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93240","aliases":[],"title":"memcg: make the v1 soft limit knob inert","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmemcg: make the v1 soft limit knob inert\n\nThe v1 soft limit has been deprecated since v6.12 and nobody has reported\ndepending on it.  Start the removal by decoupling the interface from the\nimplementation: keep memory.soft_limit_in_bytes, but ignore writes to it\nand always report the maximum value on read similar to what\nmemory.kmem.limit_in_bytes already does.\n\nWrites are still parsed, so malformed input keeps returning -EINVAL.  The\nknob now also behaves the same everywhere: it used to return -EOPNOTSUPP\non PREEMPT_RT, where soft limit reclaim has always been disabled.\n\nThis also fixes the syzbot report linked below.  Soft limit reclaim is the\nonly caller that runs shrink_lruvec() from kswapd against a specific\nmemcg, so it is the only way to reach lru_gen_shrink_lruvec() and in turn\nset_mm_walk(), which warns when called from kswapd.","state":0,"publishedAt":"2026-09-24T15:34:32.134+00:00","modifiedAt":"2026-10-21T12:52:27.295+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"Documentation/admin-guide/cgroup-v1/memory.rst\",\n                        \"mm/memcontrol-v1.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e9d4e1ee788097484606c32122f146d802a9c5fb\",\n                            \"lessThan\": \"bf75f14d755f9cfbb246e6cc011b53cdd5142de3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e9d4e1ee788097484606c32122f146d802a9c5fb\",\n                            \"lessThan\": \"72fb67f6e0e5d78e4f34cf9929d1afdb0fd54203\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e9d4e1ee788097484606c32122f146d802a9c5fb\",\n                            \"lessThan\": \"0a90e268cce7023f34087bfa4affb42e29ff5f45\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e9d4e1ee788097484606c32122f146d802a9c5fb\",\n                            \"lessThan\": \"5ec8f629a300cc40e746d6178f724bdff7683fa7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e9d4e1ee788097484606c32122f146d802a9c5fb\",\n                            \"lessThan\": \"a3417097fb107cea3358b19bcbb4eb655fd67f8c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"Documentation/admin-guide/cgroup-v1/memory.rst\",\n                        \"mm/memcontrol-v1.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.3\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.51\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.5\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/bf75f14d755f9cfbb246e6cc011b53cdd5142de3","https://git.kernel.org/stable/c/72fb67f6e0e5d78e4f34cf9929d1afdb0fd54203","https://git.kernel.org/stable/c/0a90e268cce7023f34087bfa4affb42e29ff5f45","https://git.kernel.org/stable/c/5ec8f629a300cc40e746d6178f724bdff7683fa7","https://git.kernel.org/stable/c/a3417097fb107cea3358b19bcbb4eb655fd67f8c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93240","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93240","identifiers":["CVE-2026-93240"]},"retained":false,"historicalAffected":[]}],"coverage":[]}