In the Linux kernel, the following vulnerability has been resolved:
mm/damon/ops-common: ignore migration request to invalid nodes
damon_migrate_pages() tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOS_MIGRATE_{HOT,COLD} action, the below kernel BUG can happen.
[ 7831.883495] BUG: unable to handle page fault for address: 0000000000001f48 [ 7831.884160] #PF: supervisor read access in kernel mode [ 7831.884681] #PF: error_code(0x0000) - not-present page [ 7831.885203] PGD 0 P4D 0 [ 7831.885468] Oops: Oops: 0000 [#1] SMP PTI [ 7831.885852] CPU: 31 UID: 0 PID: 94202 Comm: kdamond.0 Not tainted 6.16.0-rc5-mm-new-damon+ #93 PREEMPT(voluntary) [ 7831.886913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-4.el9 04/01/2014 [ 7831.887777] RIP: 0010:__alloc_frozen_pages_noprof (include/linux/mmzone.h:1724 include/linux/mmzone.h:1750 mm/page_alloc.c:4936 mm/page_alloc.c:5137) [...] [ 7831.895953] Call Trace: [ 7831.896195] <TASK> [ 7831.896397] __folio_alloc_noprof (mm/page_alloc.c:5183 mm/page_alloc.c:5192) [ 7831.896787] migrate_pages_batch (mm/migrate.c:1189 mm/migrate.c:1851) [ 7831.897228] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.897735] migrate_pages (mm/migrate.c:2078) [ 7831.898141] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.898664] damon_migrate_folio_list (mm/damon/ops-common.c:321 mm/damon/ops-common.c:354) [ 7831.899140] damon_migrate_pages (mm/damon/ops-common.c:405) [...]
Add a target node validity check in damon_migrate_pages(). The validity check is stolen from that of do_pages_move(), which is being used for the move_pages() system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel-livepatch-6.12.46-66.121Upgrade bpftool6.12Upgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpf-devel | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Suse | — | Upgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub