CVE-2026-74379

dax/kmem: account for partial discontiguous resource upon removal

N/A
Published: August 15, 2026 at 05:58 AM UTC
Updated: August 17, 2026 at 06:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds (at least one range is mapped) but a subsequent range fails request_mem_region() or add_memory_driver_managed(), the probe silently continues, ultimately returning success, but with the corresponding range resource NULL'ed out. dev_dax_kmem_remove() iterates over all dax_device ranges regardless of if the underlying resource exists. When remove_memory() is called later, it returns 0 because the memory was never added which causes dev_dax_kmem_remove() to incorrectly assume the (nonexistent) resource can be removed and attempts cleanup on a NULL pointer. Fix this by skipping these ranges altogether, noting that these cases are considered success, such that the cleanup is still reached when all actually-added ranges are successfully removed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.10 ≤ v < 5.15.2125.10 ≤ v < 6.1.1785.10 ≤ v < 6.12.975.10 ≤ v < 6.18.405.10 ≤ v < 6.6.1455.10 ≤ v < 7.1.55.10 ≤ v < 7.25.1060e93dc097f7f13a16a7e4b75b8803eb2adbb721
Vendor states this is fixed in 30ea97affbcce236c57287c82dc6ef7a29c63b76 (fixed)
Vendor states this is fixed in 598ed7393a639c7547b28ff3e14db9f1ac37c132 (fixed)
Vendor states this is fixed in 5d3139abb9d1671fa5e42c3d6d8cb3b05479c5bb (fixed)
Vendor states this is fixed in 799e54c510a03a65a57627018a817838d72f35bd (fixed)
Vendor states this is fixed in 8aa442cfce79e2d69e72fc8e0c0864ac2971149d (fixed)
Vendor states this is fixed in d47b0b8a69a13e06afafa54723f3e8c99b0c788f (fixed)
Vendor states this is fixed in ef4fc53898bd6c4d0119cc6d419ebef7f2560f31 (fixed)
Vendor states this is fixed in 5.10 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card