Riskcovery

CVE-2026-80729

mm/huge_memory: initialise workingset state before folio split

State
Published
Severity
Not scored
Published
Sep 3, 2026
Updated
Oct 11, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: initialise workingset state before folio split

xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but __folio_split() leaves the xa_state's xa_lru unset. That lets a live, memcg-charged xa_node exist without being linked into the mapping's shadow_nodes list_lru; when reclaim later walks the list_lru it trips VM_WARN_ON(!css_is_dying()).

Use mapping_set_update() to install both the workingset update callback and the shadow_nodes list_lru on the xa_state.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 58729c04cf1092b87aeef0bf0998c9e2e4771133 to before dc87b56b43c9143f2405e434cff1530c3488b571Affected
  • 58729c04cf1092b87aeef0bf0998c9e2e4771133 to before d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55Affected
  • 58729c04cf1092b87aeef0bf0998c9e2e4771133 to before aca1f2d5de17e138bc6c4859126b77e516b82541Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.1.9 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.