CVE-2026-74644
Received Received - Intake

Memory Leak in Linux Kernel DAMON

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damon_pa_migrate() and damos_va_migrate() isolate folios into a local list and then call damon_migrate_pages(). When target_nid is invalid (including the scheme default NUMA_NO_NODE / -1), damon_migrate_pages() returns early without putting the folios back to the LRU. Callers then discard the list head while those folios remain isolated with an extra reference taken by folio_isolate_lru(). The pages stay off the LRU for as long as the mapping exists (anon active+inactive counts drop while RSS does not), and the leftover references can pin the pages after the mapping is gone. Put the folios back on the invalid-nid path so ignored migration requests still return them to the LRU.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74644
EUVD
EUVD-2026-64581

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of memory folios during migration. When a target NUMA node ID is invalid, the system fails to return isolated folios to the LRU list, leaving them stranded with extra references. This causes memory pages to remain off the LRU indefinitely, potentially pinning them in memory even after their mapping is removed.

Detection Guidance

This vulnerability is specific to the Linux kernel's DAMON subsystem and may not have direct detection commands. Monitor for unusual memory usage patterns or isolated folios remaining off the LRU list. Check kernel logs for DAMON-related errors or warnings.

Impact Analysis

This could lead to memory leaks where pages are not freed properly, reducing available memory over time. Systems may experience gradual performance degradation due to inefficient memory management. In severe cases, it might cause unexpected crashes or instability if memory pressure becomes critical.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. If immediate patching is not possible, consider disabling the DAMON subsystem if not in use. Monitor system memory usage and performance for anomalies.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74644. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart