The vulnerability involves the Linux kernel's damon_pa_migrate() and damos_va_migrate() functions, which isolate folios into a local list before calling damon_migrate_pages(). If the target NUMA node ID is invalid (including NUMA_NO_NODE / -1), damon_migrate_pages() returns early without returning the folios to the LRU list. Consequently, callers discard the isolated folio list while the folios remain isolated with an extra reference, causing them to stay off the LRU and potentially pin pages beyond the lifetime of the mapping. The patch corrects this by ensuring folios are put back on the LRU even when the migration target node is invalid.

Affected systems may experience memory accounting inconsistencies where anonymous active and inactive page counts drop while the resident set size (RSS) does not, due to pages being pinned off the LRU. This can lead to inefficient memory usage and potential memory leaks. There is no indication of remote code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to address this issue by ensuring folios are returned to the LRU list on invalid migration node paths. Users should apply the official kernel updates that include this patch. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the current remediation guidance.