CVE-2026-74644

mm/damon/ops-common: putback folios on invalid migrate nid

N/A
Published: August 22, 2026 at 03:32 PM UTC
Updated: October 14, 2026 at 01:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damon_pa_migrate() and damos_va_migrate() isolate folios into a local list and then call damon_migrate_pages(). When target_nid is invalid (including the scheme default NUMA_NO_NODE / -1), damon_migrate_pages() returns early without putting the folios back to the LRU. Callers then discard the list head while those folios remain isolated with an extra reference taken by folio_isolate_lru(). The pages stay off the LRU for as long as the mapping exists (anon active+inactive counts drop while RSS does not), and the leftover references can pin the pages after the mapping is gone. Put the folios back on the invalid-nid path so ignored migration requests still return them to the LRU.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.12.44 ≤ v < 6.12.1056.16.4 ≤ v < 6.176.12.446.16.46.177c303fa1f311aadc17fa82b7bbf776412adf45de7e6c3130690a01076efdf45aa02ba5d5c16849a09d0c2d15aff96746f99a7c97221bb8ce5b62db19
Vendor states this is fixed in 460181e4bb47a57776c64f0832c2096de8878cb3 (fixed)
Vendor states this is fixed in 5deb65c34e682e7c5f5df417a70e223e8fcc5f5a (fixed)
Vendor states this is fixed in 7001c0a1bc9018cd5b2b72ebebb216d738b2ec81 (fixed)
Vendor states this is fixed in cfef454862b7d2776e0955b873dd59af6b47cfcb (fixed)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.18.45 (unaffected)
Vendor states this is fixed in 7.1.9 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card