In the Linux kernel, the following vulnerability has been resolved:
mm/damon/ops-common: ignore migration request to invalid nodes
damon_migrate_pages() tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOS_MIGRATE_{HOT,COLD} action, the below kernel BUG can happen.
[ 7831.883495] BUG: unable to handle page fault for address: 0000000000001f48 [ 7831.884160] #PF: supervisor read access in kernel mode [ 7831.884681] #PF: error_code(0x0000) - not-present page [ 7831.885203] PGD 0 P4D 0 [ 7831.885468] Oops: Oops: 0000 [#1] SMP PTI [ 7831.885852] CPU: 31 UID: 0 PID: 94202 Comm: kdamond.0 Not tainted 6.16.0-rc5-mm-new-damon+ #93 PREEMPT(voluntary) [ 7831.886913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-4.el9 04/01/2014 [ 7831.887777] RIP: 0010:__alloc_frozen_pages_noprof (include/linux/mmzone.h:1724 include/linux/mmzone.h:1750 mm/page_alloc.c:4936 mm/page_alloc.c:5137) [...] [ 7831.895953] Call Trace: [ 7831.896195] <TASK> [ 7831.896397] __folio_alloc_noprof (mm/page_alloc.c:5183 mm/page_alloc.c:5192) [ 7831.896787] migrate_pages_batch (mm/migrate.c:1189 mm/migrate.c:1851) [ 7831.897228] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.897735] migrate_pages (mm/migrate.c:2078) [ 7831.898141] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.898664] damon_migrate_folio_list (mm/damon/ops-common.c:321 mm/damon/ops-common.c:354) [ 7831.899140] damon_migrate_pages (mm/damon/ops-common.c:405) [...]
Add a target node validity check in damon_migrate_pages(). The validity check is stolen from that of do_pages_move(), which is being used for the move_pages() system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-libbpf-develUpgrade kernel6.12Upgrade kernel6.12-headersUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf6.12 | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Suse | — | Upgrade dtb-qcomUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade dtb-lgUpgrade kernel-rt-livepatch | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub