CVE-2026-64180

mm/memory_hotplug: fix memory block reference leak on remove

MEDIUM
5.5
CVSS Score
Published: July 19, 2026 at 03:41 PM UTC
Updated: August 12, 2026 at 03:48 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leaks and locking", v2. This series fixes two memory block device reference leaks and one locking issue around the per-memory_block hwpoison counter. This patch (of 2): remove_memory_blocks_and_altmaps() looks up each memory block with find_memory_block(), which acquires a reference to the memory block device. That reference is never dropped on this path, resulting in a leaked device reference when removing memory blocks and their altmaps. Drop the reference after retrieving mem->altmap and clearing mem->altmap, before removing the memory block device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.13 ≤ v < 6.18.346.19 ≤ v < 7.0.116.8 ≤ v < 6.12.926.8 ≤ v < 6.18.346.8 ≤ v < 7.0.116.8 ≤ v < 7.16b8f0798b85aa529011570369db985a788f3003f7.1 rc17.1 rc27.1 rc37.1 rc4
Vendor states this is fixed in 09ce923071e7852ece60d7368e05249bf32c7967 (fixed)
Vendor states this is fixed in 93866f55f7e292fe3d47d36c9efe5ee10213a06b (fixed)
Vendor states this is fixed in b8ab30c79fc00147125b9c39f928561d9dd13d06 (fixed)
Vendor states this is fixed in df64c0d21c3f85f844b2f656333e43d97e6ffa74 (fixed)
Vendor states this is fixed in 6.12.92 (unaffected)
Vendor states this is fixed in 6.18.34 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
Vendor states this is fixed in 7.0.11 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card