---
cve: "CVE-2026-74644"
severity: "LOW"
cvss: 3.1
epss: "6.2%"
vendor: "Linux"
kev: false
exploited: false
published: "2026-08-22 16:16:37"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-05T16:45:06+02:00"
---

# CVE-2026-74644

> 3.1 LOW

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/ops-common: putback folios on invalid migrate nid

damon_pa_migrate() and damos_va_migrate() isolate folios into a local list
and then call damon_migrate_pages().  When target_nid is invalid
(including the scheme default NUMA_NO_NODE / -1), damon_migrate_pages()
returns early without putting the folios back to the LRU.

Callers then discard the list head while those folios remain isolated with
an extra reference taken by folio_isolate_lru().  The pages stay off the
LRU for as long as the mapping exists (anon active+inactive counts drop
while RSS does not), and the leftover references can pin the pages after
the mapping is gone.

Put the folios back on the invalid-nid path so ignored migration requests
still return them to the LRU.

## Patch verfügbar (OSV)

- Kernel ≥ 6.12.105
- Kernel ≥ 6.18.45
- Kernel ≥ 7.1.9

## Referenzen

- <https://git.kernel.org/stable/c/460181e4bb47a57776c64f0832c2096de8878cb3>
- <https://git.kernel.org/stable/c/5deb65c34e682e7c5f5df417a70e223e8fcc5f5a>
- <https://git.kernel.org/stable/c/7001c0a1bc9018cd5b2b72ebebb216d738b2ec81>
- <https://git.kernel.org/stable/c/cfef454862b7d2776e0955b873dd59af6b47cfcb>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-74644) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_