---
id: CVE-2026-80729
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/huge_memory: initialise workingset state before folio split

  xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but
  __folio_split() leaves the xa_state's xa…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mm/huge_memory: initialise workingset state before folio split

  xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but
  __folio_split() leaves the xa_state's xa…
severity: none
published: '2026-09-03'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T14:17:07.213'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-80729'
references:
  - url: 'https://git.kernel.org/stable/c/aca1f2d5de17e138bc6c4859126b77e516b82541'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dc87b56b43c9143f2405e434cff1530c3488b571'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00198
epssPercentile: 0.08789
ingestedAt: '2026-10-12T14:50:34.037Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mm/huge_memory: initialise workingset state before folio split

xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but
__folio_split() leaves the xa_state's xa_lru unset.  That lets a live,
memcg-charged xa_node exist without being linked into the mapping's
shadow_nodes list_lru; when reclaim later walks the list_lru it trips
VM_WARN_ON(!css_is_dying()).

Use mapping_set_update() to install both the workingset update callback
and the shadow_nodes list_lru on the xa_state.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.