In the Linux kernel, the following vulnerability has been resolved:
mm/damon/ops-common: ignore migration request to invalid nodes
damon_migrate_pages() tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOS_MIGRATE_{HOT,COLD} action, the below kernel BUG can happen.
[ 7831.883495] BUG: unable to handle page fault for address: 0000000000001f48 [ 7831.884160] #PF: supervisor read access in kernel mode [ 7831.884681] #PF: error_code(0x0000) - not-present page [ 7831.885203] PGD 0 P4D 0 [ 7831.885468] Oops: Oops: 0000 [#1] SMP PTI [ 7831.885852] CPU: 31 UID: 0 PID: 94202 Comm: kdamond.0 Not tainted 6.16.0-rc5-mm-new-damon+ #93 PREEMPT(voluntary) [ 7831.886913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-4.el9 04/01/2014 [ 7831.887777] RIP: 0010:__alloc_frozen_pages_noprof (include/linux/mmzone.h:1724 include/linux/mmzone.h:1750 mm/page_alloc.c:4936 mm/page_alloc.c:5137) [...] [ 7831.895953] Call Trace: [ 7831.896195] <TASK> [ 7831.896397] __folio_alloc_noprof (mm/page_alloc.c:5183 mm/page_alloc.c:5192) [ 7831.896787] migrate_pages_batch (mm/migrate.c:1189 mm/migrate.c:1851) [ 7831.897228] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.897735] migrate_pages (mm/migrate.c:2078) [ 7831.898141] ? __pfx_alloc_migration_target (mm/migrate.c:2137) [ 7831.898664] damon_migrate_folio_list (mm/damon/ops-common.c:321 mm/damon/ops-common.c:354) [ 7831.899140] damon_migrate_pages (mm/damon/ops-common.c:405) [...]
Add a target node validity check in damon_migrate_pages(). The validity check is stolen from that of do_pages_move(), which is being used for the move_pages() system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12Upgrade perf6.12Upgrade kernel6.12-libbpf-develUpgrade bpftool6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpfUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-tools | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-apm | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub