CVE-2026-80729
Description
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before folio split xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes, but __folio_split() leaves the xa_state's xa_lru unset. That lets a live, memcg-charged xa_node exist without being linked into the mapping's shadow_nodes list_lru; when reclaim later walks the list_lru it trips VM_WARN_ON(!css_is_dying()). Use mapping_set_update() to install both the workingset update callback and the shadow_nodes list_lru on the xa_state.
How to fix
- Linux Linuxdc87b56b43c9143f2405e434cff1530c3488b571, d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55, aca1f2d5de17e138bc6c4859126b77e516b82541 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 58729c04cf1092b87aeef0bf0998c9e2e4771133 ≤ v < dc87b56b43c9143f2405e434cff1530c3488b571, 58729c04cf1092b87aeef0bf0998c9e2e4771133 ≤ v < d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55, 58729c04cf1092b87aeef0bf0998c9e2e4771133 ≤ v < aca1f2d5de17e138bc6c4859126b77e516b82541, 6.15 | dc87b56b43c9143f2405e434cff1530c3488b571, d858f7c9fc514f1d9d3be7d00b2dd4e2f2383b55, aca1f2d5de17e138bc6c4859126b77e516b82541 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.