{
  "cveId": "CVE-2026-80719",
  "url": "https://patchblox.com/security/cve/CVE-2026-80719",
  "summary": "CVE-2026-80719 is fixed in linux on 1 platform by DEBIAN-CVE-2026-80719 (version 7.1.8-1), released August 29, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: mglru: fix stale batch updates after memcg r...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  mm: mglru: fix stale batch updates after memcg reparenting  The mglru page table walker batches per-generation size deltas in walk-\u003Enr_pages while walking page tables without holding the lruvec lock.  The reset_batch_size() later folds those deltas into walk-\u003Elruvec under the lruvec lock.  The page table walker can run concurrently with the memcg reparenting path as follows:  CPU0                           CPU1 ====                           ====  walk_mm --\u003E walk_page_range     --\u003E update_batch_size         --\u003E walk-\u003Enr_pages \u002B= delta                                mem_cgroup_css_offline                               --\u003E memcg_reparent_objcgs                                   --\u003E lock lruvec                                       lru_gen_reparent_memcg                                       --\u003E reparent child folios to parent                                       unlock lruvec      lock lruvec     reset_batch_size     --\u003E child lrugen-\u003Enr_pages \u002B= delta  This will trigger the following warning in lru_gen_exit_memcg():  \tVM_WARN_ON_ONCE(memchr_inv(lruvec-\u003Elrugen.nr_pages, 0, \t\t\t\t   sizeof(lruvec-\u003Elrugen.nr_pages)));  And the user-visible impact of underestimated nr_pages in MGLRU was premature OOMs because MGLRU does not try to reclaim memory when nr_pages reaches zero, but there are still more pages.  To fix it, make reset_batch_size() check CSS_DYING under RCU before flushing the pending batch.  A non-dying memcg keeps the original lruvec stable against RCU-delayed offlining; a dying memcg redirects the deltas to the first non-dying ancestor.",
  "published": "2026-08-28T08:16:57Z",
  "severity": "",
  "epss": 0.00198,
  "epssPercentile": 0.09572,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.8-1",
      "fix": "DEBIAN-CVE-2026-80719",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-80719",
      "released": "2026-08-29T00:46:20Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}