Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-64415

CVE-2026-64415MEDIUM

Linux Linux — mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0009    0.6     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    5168a68eb78fa1c67a8b2d31d0642c7fd866cc12 –  —
  Linux    6.12 –                                      6.12.96

TIMELINE
  Jul 19  Reserved by Linux
  Jul 25  Published (CNA: Linux)
  Sep 4   ENRICHED — CVE-2026-64415 (Linux). Received CVSS 5.5 and CPE data from NVD.

CWE-667 · CNA: Linux · CVSS v3.1 · 4 references · NVD status: Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup We hit a real softlockup in an internal stress test environment. The workload was LTP memory/swap stress on a large arm64 machine, with 320 CPUs, about 1TB memory and an 8.6GB swap device. The system was under heavy load and the swap device had a large number of full clusters. The softlockup was triggered during a stress test after about 3 days. So, add periodic cond_resched() calls during large full_clusters reclaim operations to prevent softlockup issues. Detailed call trace as follow: PID: 3817773 TASK: ffff0883bb28b780 CPU: 48 COMMAND: "kworker/48:7" #0 [ffff800080183d10] __crash_kexec at ffffa4c1361e5de4 #1 [ffff800080183d90] panic at ffffa4c1360d5e9c #2 [ffff800080183e20] watchdog_timer_fn at ffffa4c136231fa8 ... #16 [ffff8000c4ad3cb0] swap_cache_del_folio at ffffa4c1363e1614 #17 [ffff8000c4ad3ce0] __try_to_reclaim_swap at ffffa4c1363e4bfc #18 [ffff8000c4ad3d40] swap_reclaim_full_clusters at ffffa4c1363e5474 #19 [ffff8000c4ad3da0] swap_reclaim_work at ffffa4c1363e550c #20 [ffff8000c4ad3dc0] process_one_work at ffffa4c136102edc #21 [ffff8000c4ad3e10] worker_thread at ffffa4c136103398 #22 [ffff8000c4ad3e70] kthread at ffffa4c13610d95c

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
July 19, 2026	Reserved	Reserved by Linux
July 25, 2026	Published	Published (CNA: Linux)
September 4, 2026	ENRICHED	ENRICHED — CVE-2026-64415 (Linux). Received CVSS 5.5 and CPE data from NVD.

Affected

Affected products and packages — 2 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux	Linux	—	5168a68eb78fa1c67a8b2d31d0642c7fd866cc12	—
Linux	Linux	—	6.12	6.12.96

Weaknesses

CWE-667

References (4)

Authoritative record: CVE-2026-64415 at cve.org

Vendors: linux

Weaknesses: CWE-667

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-64415 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.