CVE-2026-80729mm/huge_memory: initialise workingset state before folio split
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before folio split xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but __folio_split() leaves the xa_state's xa_lru unset. That lets a live, memcg-charged xa_node exist without being linked into the mapping's shadow_nodes list_lru; when reclaim later walks the list_lru it trips VM_WARN_ON(!css_is_dying()). Use mapping_set_update() to install both the workingset update callback and the shadow_nodes list_lru on the xa_state.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 58729c04cf1092b87aeef0bf0998c9e2e4771133 before dc87b56b43c9143f2405e434cff1530c3488b571; from 58729c04cf1092b87aeef0bf0998c9e2e4771133 before d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55; from 58729c04cf1092b87aeef0bf0998c9e2e4771133 before aca1f2d5de17e138bc6c4859126b77e516b82541 | CNA record |
References
- https://git.kernel.org/stable/c/dc87b56b43c9143f2405e434cff1530c3488b571
- https://git.kernel.org/stable/c/d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55
- https://git.kernel.org/stable/c/aca1f2d5de17e138bc6c4859126b77e516b82541
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.