CVE-2026-64129

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix spinlock leak in migratevmainserthugepmdpage When checkstableaddressspace fails after the PMD spinlock has been acquired via pmdlock, the code jumps directly to the abort label, bypassing the spinunlock call...

kernel: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups

A flaw was found in the Linux kernel MADVCOLLAPSE path. A race with khugepaged can clear a PMD after the collapse code has decided it is a page-table pointer. A local user can trigger a bad PMD lookup and crash the kernel...