CVE-2026-74644

mm/damon/ops-common: putback folios on invalid migrate nid

State
Published
Severity
Not scored
Published
Aug 22, 2026
Updated
Aug 23, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/ops-common: putback folios on invalid migrate nid

damon_pa_migrate() and damos_va_migrate() isolate folios into a local list and then call damon_migrate_pages(). When target_nid is invalid (including the scheme default NUMA_NO_NODE / -1), damon_migrate_pages() returns early without putting the folios back to the LRU.

Callers then discard the list head while those folios remain isolated with an extra reference taken by folio_isolate_lru(). The pages stay off the LRU for as long as the mapping exists (anon active+inactive counts drop while RSS does not), and the leftover references can pin the pages after the mapping is gone.

Put the folios back on the invalid-nid path so ignored migration requests still return them to the LRU.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7c303fa1f311aadc17fa82b7bbf776412adf45de to before 7001c0a1bc9018cd5b2b72ebebb216d738b2ec81Affected
  • 7e6c3130690a01076efdf45aa02ba5d5c16849a0 to before 460181e4bb47a57776c64f0832c2096de8878cb3Affected
  • 7e6c3130690a01076efdf45aa02ba5d5c16849a0 to before cfef454862b7d2776e0955b873dd59af6b47cfcbAffected
  • 7e6c3130690a01076efdf45aa02ba5d5c16849a0 to before 5deb65c34e682e7c5f5df417a70e223e8fcc5f5aAffected
  • 9d0c2d15aff96746f99a7c97221bb8ce5b62db19Affected
  • 6.12.44 to before 6.12.105Affected
  • 6.16.4 to before 6.17Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.12.105 through 6.12.*Not affected
  • 6.18.45 through 6.18.*Not affected
  • 7.1.9 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.