CVE-2026-80729

A flaw was found in the Linux kernel's memory management (mm/huge_memory) component. When a folio is split, the workingset state may not be properly initialized, leading to an unlinked memory control group (memcg) charged node. This can cause the system to trigger a kernel warning during memory reclaim operations, potentially resulting in a denial of service.

A folio split path in mm huge_memory can create memcg charged page cache xa_nodes without installing the required workingset and shadow_nodes list_lru state in the xa_state. Reclaim may later observe this inconsistent list_lru state and hit VM_WARN_ON(!css_is_dying()), which can become a local denial of service on systems configured to panic on warnings or under severe reclaim pressure. For the CVSS the PR:L is used because a local user process is needed to drive memory mappings, page cache activity, folio split behavior, and reclaim conditions. The issue is not directly network reachable and does not show a concrete UAF, OOB write, information leak, or arbitrary write primitive. Impact is primarily availability loss and the paranoid score raises only availability to high while keeping confidentiality and integrity as none.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.