CVE-2026-80719

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mm: mglru: fix stale batch updates after memcg reparenting

The mglru page table walker batches per-generation size deltas in

walk->nr_pages while walking page tables without holding the lruvec lock.

The reset_batch_size() later folds those deltas into walk->lruvec under

the lruvec lock.

The page table walker can run concurrently with the memcg reparenting path

as follows:

CPU0 CPU1

==== ====

walk_mm

--> walk_page_range

--> update_batch_size

--> walk->nr_pages += delta

mem_cgroup_css_offline

--> memcg_reparent_objcgs

--> lock lruvec

lru_gen_reparent_memcg

--> reparent child folios to parent

unlock lruvec

lock lruvec

reset_batch_size

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References