CVE-2026-64180: mm/memory_hotplug: fix memory block reference leak on remove
In the Linux kernel, the following vulnerability has been resolved:
mm/memoryhotplug: fix memory block reference leak on remove
Patch series "mm: Fix memory block leaks and locking", v2.
This series fixes two memory block device reference leaks and one locking issue around the per-memoryblock hwpoison counter.
This patch (of 2):
removememoryblocksandaltmaps() looks up each memory block with findmemoryblock(), which acquires a reference to the memory block device.
That reference is never dropped on this path, resulting in a leaked device reference when removing memory blocks and their altmaps. Drop the reference after retrieving mem->altmap and clearing mem->altmap, before removing the memory block device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64180?
CVE-2026-64180 has a severity rating of 10, indicating a critical security vulnerability.
How do I fix CVE-2026-64180?
To address CVE-2026-64180, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-64180?
CVE-2026-64180 affects the Linux kernel, specifically impacting systems that utilize memory hotplug functionality.
What does CVE-2026-64180 involve?
CVE-2026-64180 involves fixing a memory block reference leak that occurs during the removal of memory blocks.
Is CVE-2026-64180 exploitable?
Yes, given its critical severity rating, CVE-2026-64180 could be exploitable under certain circumstances, potentially leading to denial of service.