CVE-2026-90383: misc: sgi-gru: remove interrupt-context page-table walks
In the Linux kernel, the following vulnerability has been resolved:
misc: sgi-gru: remove interrupt-context page-table walks
The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user page tables and supports only PMD-level large mappings on x86-64.
Remove the direct walker. Send interrupt faults directly to user polling mode so the existing call-OS fallback retries them in process context.
Remove the mmap-lock failure statistic that can no longer be incremented.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
The issue is in the Linux kernel's sgi-gru component. Exposure depends on use of the GRU TLB miss handler, particularly when it handles faults in interrupt context.
What does the fix change in fault handling?
The fix removes the direct page-table walk from the interrupt-context handler. Interrupt faults are sent to user polling mode, where the existing call-OS fallback retries them in process context.