Linux Kernel Folio Migration Vulnerability Leading to Memory Control Group Issues

Vulnerability

A vulnerability in the Linux kernel's folio migration process can cause issues with the memory control group (memcg) management. When a folio is successfully migrated, the old folio's memcg data is reset, while the destination folio's memcg data remains unset if the migration fails. This discrepancy can lead to problems when the folio is returned to the least recently used (LRU) list, as the memcg code expects consistent data. The vulnerability was identified while running the 'hmm' self-tests, where a warning was triggered due to the improper handling of folio memcg data, causing the migration process to violate memcg management rules.

Impact

The vulnerability disrupts the proper functioning of memory control group management, leading to potential inconsistencies and issues within the memcg system.

Reproduction

The vulnerability can be reproduced by running the 'hmm-tests' self-test suite included with the Linux kernel. This suite exercises the folio migration process, during which the vulnerability manifests as a warning related to improper memory control group data handling.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.