CVE-2026-90383

misc: sgi-gru: remove interrupt-context page-table walks

State: Published
Severity: 7.8 High
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

misc: sgi-gru: remove interrupt-context page-table walks

The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user page tables and supports only PMD-level large mappings on x86-64.

Remove the direct walker. Send interrupt faults directly to user polling mode so the existing call-OS fallback retries them in process context.

Remove the mmap-lock failure statistic that can no longer be incremented.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 0ca505b973aa1a5e3fcca7bd04774e794ff5e662Affected 142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 5a540ced720b4397306337cab34af1af4b30827cAffected 142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 877423f595b60f8fe7c18b64a5d283d9e1732a13Affected 142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 6248eb1833ff0adfdbbadd5f846c2f22e02a01b0Affected 142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before ef81e4a1628ecfb9cfc442de10883f383faf17a1Affected 142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 928a8e9f523df845fc496bcb9811013b67aabec5Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 0ca505b973aa1a5e3fcca7bd04774e794ff5e662Affected
142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 5a540ced720b4397306337cab34af1af4b30827cAffected
142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 877423f595b60f8fe7c18b64a5d283d9e1732a13Affected
142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 6248eb1833ff0adfdbbadd5f846c2f22e02a01b0Affected
142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before ef81e4a1628ecfb9cfc442de10883f383faf17a1Affected
142586409c8be7dc071bb94d7cd2d69ccfd99b6b to before 928a8e9f523df845fc496bcb9811013b67aabec5Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.