CVE-2026-64180

Summary

In the Linux kernel, the following vulnerability has been resolved:

mm/memory_hotplug: fix memory block reference leak on remove

Patch series "mm: Fix memory block leaks and locking", v2.

This series fixes two memory block device reference leaks and one locking issue around the per-memory_block hwpoison counter.

This patch (of 2):

remove_memory_blocks_and_altmaps() looks up each memory block with find_memory_block(), which acquires a reference to the memory block device.

That reference is never dropped on this path, resulting in a leaked device reference when removing memory blocks and their altmaps. Drop the reference after retrieving mem->altmap and clearing mem->altmap, before removing the memory block device.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux6b8f0798b85aa529011570369db985a788f3003f < b8ab30c79fc00147125b9c39f928561d9dd13d06affected
LinuxLinux6b8f0798b85aa529011570369db985a788f3003f < 09ce923071e7852ece60d7368e05249bf32c7967affected
LinuxLinux6b8f0798b85aa529011570369db985a788f3003f < df64c0d21c3f85f844b2f656333e43d97e6ffa74affected
LinuxLinux6b8f0798b85aa529011570369db985a788f3003f < 93866f55f7e292fe3d47d36c9efe5ee10213a06baffected
LinuxLinux6.8affected
LinuxLinux0 < 6.8unaffected
LinuxLinux6.12.92 <= 6.12.*unaffected
LinuxLinux6.18.34 <= 6.18.*unaffected
LinuxLinux7.0.11 <= 7.0.*unaffected
LinuxLinux7.1 <= *unaffected

Weaknesses

References