---
id: CVE-2026-74644
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/damon/ops-common: putback folios on invalid migrate nid

  damon_pa_migrate() and damos_va_migrate() isolate folios into a local list
  and then call damon_migrate_pages…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/damon/ops-common: putback folios on invalid migrate nid

  damon_pa_migrate() and damos_va_migrate() isolate folios into a local list
  and then call damon_migrate_pages…
severity: none
published: '2026-08-22'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74644'
references:
  - url: 'https://git.kernel.org/stable/c/460181e4bb47a57776c64f0832c2096de8878cb3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5deb65c34e682e7c5f5df417a70e223e8fcc5f5a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7001c0a1bc9018cd5b2b72ebebb216d738b2ec81'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cfef454862b7d2776e0955b873dd59af6b47cfcb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00168
epssPercentile: 0.05632
ingestedAt: '2026-10-14T13:30:58.525Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/ops-common: putback folios on invalid migrate nid

damon_pa_migrate() and damos_va_migrate() isolate folios into a local list
and then call damon_migrate_pages().  When target_nid is invalid
(including the scheme default NUMA_NO_NODE / -1), damon_migrate_pages()
returns early without putting the folios back to the LRU.

Callers then discard the list head while those folios remain isolated with
an extra reference taken by folio_isolate_lru().  The pages stay off the
LRU for as long as the mapping exists (anon active+inactive counts drop
while RSS does not), and the leftover references can pin the pages after
the mapping is gone.

Put the folios back on the invalid-nid path so ignored migration requests
still return them to the LRU.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.