The vulnerability occurs when the damon_pa_migrate() or damos_va_migrate() functions isolate folios and then call damon_migrate_pages() with an invalid target NUMA node. The migration routine returns early without returning the folios to the LRU list, leaving pages isolated with an extra reference. These pages continue to remain out of the LRU cycle for the lifetime of the mapping, and the dangling references can keep the pages pinned even after the mapping is removed. The net result is a memory leak that can grow with each migration request, potentially reducing the amount of memory available for other processes and causing system instability if the leak continues unchecked. The primary impact is a denial‑of‑service‑style effect through uncontrolled memory consumption, though no direct code execution or privilege escalation is described.

All systems running the Linux kernel that include the DAMON memory‑monitoring infrastructure and have not applied the patch from commit 460181e4bb47a57776c64f0832c2096de8878cb3 and its associated changes. The vulnerability is present in the generic "Linux" kernel across distributions, as the affected CNA vendor list indicates "Linux:Linux" twice.

The CVSS score is not disclosed and the EPSS value is unavailable, indicating that the exact severity assessment is unknown. However, because the issue can lead to persistent memory leakage in kernel space, the risk is considered significant, especially in environments where memory pressure is critical. The lack of a known CISA KEV entry suggests no widely observed exploitation as of the data time. The likely attack vector would be local privilege or an existing kernel exploitation that could trigger the faulty migration path, resulting in resource exhaustion. Without a public exploit, the opportunity for exploitation remains low, but the potential impact of the leak warrants prompt remediation.