In the Linux kernel, the following vulnerability has been resolved:
mm/damon/ops-common: ignore migration request to invalid nodes
damon_migrate_pages() tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOS_MIGRATE_{HOT,COLD} action, the below kernel BUG can happen.
[ 7831.883495] BUG: unable to handle page fault for address: 0000000000001f48 [ 7831.884160] #PF: supervisor read access in kernel mode [ 7831.884681] #PF: error_code(0x0000) - not-present page [ 7831.885203] PGD 0 P4D 0 [ 7831.885468] Oops: Oops: 0000 [#1] SMP PTI [ 7831.885852] CPU: 31 UID: 0 PID: 94202 Comm: kdamond.0 Not tainted 6.16.0-rc5-mm-new-damon+ #93 PREEMPT(voluntary) [ 7831.886913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-4.el9 04/01/2014 [ 7831.887777] RIP: 0010:__alloc_frozen_pages_noprof (include/linux/mmzone.h:1724 include/linux/mmzone.h:1750 mm/page_alloc.c:4936 mm/page_alloc.c:5137) [...] [ 7831.895953] Call Trace: [ 7831.896195] <TASK> [ 7831.896397] __folio_alloc_noprof (mm/page_alloc.c:5183 mm/page_alloc.c:5192) [ 7831.896787] migrate_pages_batch (mm/migrate.c:1189 mm/migrate.c:1851) [ 7831.897228] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.897735] migrate_pages (mm/migrate.c:2078) [ 7831.898141] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.898664] damon_migrate_folio_list (mm/damon/ops-common.c:321 mm/damon/ops-common.c:354) [ 7831.899140] damon_migrate_pages (mm/damon/ops-common.c:405) [...]
Add a target node validity check in damon_migrate_pages(). The validity check is stolen from that of do_pages_move(), which is being used for the move_pages() system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade perf6.12Upgrade bpftool6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-develUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade kernel-symsUpgrade dtb-amazonUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-64kb-optional | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub