CVE-2026-46277: mm/zone_device: do not touch device folio after calling ->folio_free()
In the Linux kernel, the following vulnerability has been resolved:
mm/zonedevice: do not touch device folio after calling ->foliofree()
The contents of a device folio can immediately change after calling ->foliofree(), as the folio may be reallocated by a driver with a different order. Instead of touching the folio again to extract the pgmap, use the local stack variable when calling percpurefputmany().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46277?
CVE-2026-46277 has a risk rating of 36.
What does CVE-2026-46277 affect?
CVE-2026-46277 affects the Linux kernel and specifically involves issues related to device folios.
How do I fix CVE-2026-46277?
To fix CVE-2026-46277, ensure that your Linux kernel is updated to a secure version that addresses this vulnerability.
What does calling ->folio_free() do in relation to CVE-2026-46277?
Calling ->folio_free() can lead to unpredictable changes in the contents of a device folio in the Linux kernel.
When was CVE-2026-46277 published?
CVE-2026-46277 was published on June 8, 2026.