CVE-2026-74644

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/ops-common: putback folios on invalid migrate nid

damon_pa_migrate() and damos_va_migrate() isolate folios into a local list

and then call damon_migrate_pages(). When target_nid is invalid

(including the scheme default NUMA_NO_NODE / -1), damon_migrate_pages()

returns early without putting the folios back to the LRU.

Callers then discard the list head while those folios remain isolated with

an extra reference taken by folio_isolate_lru(). The pages stay off the

LRU for as long as the mapping exists (anon active+inactive counts drop

while RSS does not), and the leftover references can pin the pages after

the mapping is gone.

Put the folios back on the invalid-nid path so ignored migration requests

still return them to the LRU.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References