CVE-2026-89755

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...

CVE-2026-89755

CVE-2026-89755 affects the Linux kernel in the mm/migrate_device subsystem. The root cause is a stale folio mapping retained after folio_free_swap() succeeds: the mapping still points to swap_space, causing folio_migrate_mapping() to take the mapped-folio path and operate on swap_space.i_pages wi...