CVE-2026-64182: drivers/base/memory: fix memory block reference leak in poison accounting
In the Linux kernel, the following vulnerability has been resolved:
drivers/base/memory: fix memory block reference leak in poison accounting
memblknrpoisoninc() and memblknrpoisonsub() look up a memory block via findmemoryblockbyid(), which acquires a reference to the memory block device.
Both helpers use the returned memory block without dropping that reference, leaking the device reference on each successful lookup. Drop the reference after updating nrhwpoison.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64182?
CVE-2026-64182 is classified with a risk severity score of 16.
How do I fix CVE-2026-64182?
To fix CVE-2026-64182, update the Linux kernel to the latest version where the vulnerability has been patched.
What specific component is affected by CVE-2026-64182?
CVE-2026-64182 affects the memory management component of the Linux kernel.
What type of vulnerability is CVE-2026-64182?
CVE-2026-64182 is a reference leak vulnerability related to poison accounting in memory block handling.
Is CVE-2026-64182 exploitable in the wild?
There is currently no information indicating that CVE-2026-64182 is actively being exploited in the wild.