CVE-2026-64180

mm/memory_hotplug: fix memory block reference leak on remove

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Jul 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/memory_hotplug: fix memory block reference leak on remove

Patch series "mm: Fix memory block leaks and locking", v2.

This series fixes two memory block device reference leaks and one locking issue around the per-memory_block hwpoison counter.

This patch (of 2):

remove_memory_blocks_and_altmaps() looks up each memory block with find_memory_block(), which acquires a reference to the memory block device.

That reference is never dropped on this path, resulting in a leaked device reference when removing memory blocks and their altmaps. Drop the reference after retrieving mem->altmap and clearing mem->altmap, before removing the memory block device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6b8f0798b85aa529011570369db985a788f3003f to before b8ab30c79fc00147125b9c39f928561d9dd13d06Affected
  • 6b8f0798b85aa529011570369db985a788f3003f to before 09ce923071e7852ece60d7368e05249bf32c7967Affected
  • 6b8f0798b85aa529011570369db985a788f3003f to before df64c0d21c3f85f844b2f656333e43d97e6ffa74Affected
  • 6b8f0798b85aa529011570369db985a788f3003f to before 93866f55f7e292fe3d47d36c9efe5ee10213a06bAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.